Re: [AOLSERVER] Is Aolserver vulnerable?

[Dossy]

On 2003.01.22, Jade Rubick <[EMAIL PROTECTED]> wrote:
> Does Aolserver implement the TRACE command?
>
> http://www.extremetech.com/article2/0,3973,841047,00.asp

    $ telnet www.panoptic.com 80
    Trying 216.25.146.66...
    Connected to www.panoptic.com.
    Escape character is '^]'.
    TRACE / HTTP/1.1
    Host: www.panoptic.com:80

    HTTP/1.0 404 Not Found
    MIME-Version: 1.0
    Date: Wed, 22 Jan 2003 21:27:30 GMT
    Server: AOLserver/3.5.0
    Content-Type: text/html
    Content-Length: 548
    Connection: close

Not by default.  You could always register a filter that
handled TRACE requests.  I might just do that to see what
kind of exploits are being used out there ... log any
TRACE attempts. ;-)

Thanks for mentioning this.

-- Dossy

--
Dossy Shiobara                       mail: [EMAIL PROTECTED]
Panoptic Computer Network             web: http://www.panoptic.com/
  "He realized the fastest way to change is to laugh at your own
    folly -- then you can let go and quickly move on." (p. 70)