Security Incidents mailing list archives

Unknown requests from IE 5


From: David Ward <dward () maidencreek com>
Date: Mon, 22 Oct 2001 15:20:58 -0700

We seem to have been receiving a number of HTTP requests similar to the following lately:

168.10.36.63 - - [22/Oct/2001:14:07:59 -0700] "GET /_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 HTTP/1.0" 200 20677 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)"

168.10.36.63 - - [22/Oct/2001:14:08:00 -0700] "GET /MSOffice/cltreq.asp?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 HTTP/1.0" 200 20677 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)"


Does anyone know what these requests are looking for? I am assuming that they are harmless requests from IE 5 assuming that it is talking to an IIS or exchange server, but I cannot find anything that mentions what these files actually are.


Dave
dward () maidencreek com
--


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com


Current thread: