Security Incidents mailing list archives

Unknown web log entry - new FrontPage exploit?


From: Michael Katz <mike () responsible com>
Date: Thu, 21 Dec 2000 13:44:43 -0800

Hi all,

Recently, I have noticed the following web log entry appearing 2-3 times per
day.

        GET /_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=2202&STRMVER=4&CAPREQ=0

Based on the _vti_bin directory, I believe it's associated with FrontPage.
When I tested the entry against a server using FrontPage extension, I
receive the following message:

        The specified module could not be found.

Can anyone shed some light on this?

Thanks.

Michael Katz
Responsible Solutions, Ltd.
mike () responsible com


Current thread: