HTTP URL with ::$DATA appended
advICE :Intrusions : 2000607

Summary

A specially constructed URL which may allow undesirable access has been seen.

Details

An attempt has been made to access a file with a trailing ::$DATA. Some servers will return the original asp file, rather than executing the asp code, thus revealing to the potential attacker critical information about the server. Consult the Microsoft Advisory to determine if your server software is susceptible to this attack.

Server source code often contains hidden passwords, hidden filenames, or easy-to-find bugs. The hacker can then use this hidden information to break into the server.

parametric information URL The suspicious URL. accessed Indicates whether the URL was successfully accessed. code The HTTP return code. arg The argument to the GET command (if any).

 
Version appeared: