> -----Original Message-----
> From: Adkins, Randy [mailto:[EMAIL PROTECTED]
> Sent: Friday, January 14, 2005 2:08 PM
> To: CF-Community
> Subject: HTTP Error Codes
> 
> ok after looking through the IIS logs, I have found two error codes
> which
> I am somewhat baffled about. Maybe someone can shed some light on it.
> 
> 
> ERROR CODE 400:  BAD REQUEST
> The request could not be understood by the server due to incorrect
> syntax.

This is exactly what it sounds like: somebody tried to get information from
your website, but the request was so munged that the server couldn't respond
properly.

It's probably nothing to worry about, but could indicate an attempted
buffer-overrun attack or something similar.

> ERROR CODE 405:  METHOD NOT ALLOWED
> The method specified in the Request-Line is not allowed for the resource
> identified by the Request-URI. The response MUST include an Allow header
> containing a list of valid methods for the requested resource.
> Would this mean your are using a form method other than POST and GET?

Probably.  Again it's probably a fishing attack checking for weaknesses in
your config.  "POST" and "GET" are the most common method types, but there
are others - the nasty one is "PUT" which allows the remote request to
create data on your server.

No server I know of ever leaves that method open, but if it were somebody
could easily place information on your server and point others to it for
downloading (when FTP servers are leveraged this way it's called "[EMAIL 
PROTECTED]"
them).

It might also just mean that the method passed was munged and didn't mean
anything (the method specified must be specifically allowed - random strings
will cause such an error).

This might also happen if the resource the request was ultimately directed
to didn't accept a method.  We've seen this problem with WebSphere and
Structs were the class being redirected to wasn't configured to handle "GET"
but could handle "POST".  If a GET was sent you'd get this error.

Hope this helps,

Jim Davis





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Get help! RoboHelp
http://www.houseoffusion.com/banners/view.cfm?bannerid=58

Message: http://www.houseoffusion.com/lists.cfm/link=i:5:142757
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/5
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:5
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.5
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to