Security Incidents mailing list archives

Re: MIME type of readme.eml (was Re: Web site infected by Nimda

From: Rob Quinn <rquinn () sec sprint net>
Date: Wed, 19 Sep 2001 15:52:03 -0400

Interestingly, the content type from www.wininternals.com (aka 207.30.43.69,
aka underconstruction.infoback.net) is application/octet-stream.  The content
type on www.digimind.fr is correct at "message/rfc822."


 Anyone have a breakdown on the MIME types they are seeing _IN HTTP_?

 It's been too long since I installed a web server - am I remembering correctly
that the MIME type is set by a web server config file, and not the HTTP in the
web page itself?

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Current thread:

Nimda - collected information Berislav Kucan (Sep 19)
- Web site infected by Nimda acz [iSecureLabs] (Sep 19)
  - RE: Web site infected by Nimda Jac Engel (Sep 19)
    - RE: Web site infected by Nimda Ken Pfeil (Sep 19)
    - RE: Web site infected by Nimda John Q. Public (Sep 19)
    - Re: MIME type of readme.eml (was Re: Web site infected by Nimda Rob Quinn (Sep 19)
    - Re: MIME type of readme.eml (was Re: Web site infected by Nimda Nick FitzGerald (Sep 19)
    - Re: MIME type of readme.eml (was Re: Web site infected by Nimda Rob Quinn (Sep 20)