On Tue, Nov 20, 2001 at 05:36:05PM +0800, kimpoy wrote: > is it because they are using Microsoft IIS?
Probably. More proof that the Gartner Group was wise in recommending everyone stop using IIS and being a victim of all its brain damages. Arguably, it might be possible to mount a class action lawsuit on Microsoft for this, similar to the lawsuit Firestone found itself in after accidents occurred when using their tires. The HTTP requests generated by Nimda and Code Red, and those that are used by script kiddies to attack an IIS site are all perfectly valid requests according to RFC 2616, so these worms and script kiddies are using the web server as it was intended to be used. But IIS doesn't do the right thing and say 404 Not Found. Instead, it hands control of the whole system to whoever or whatever fed it that HTTP request... -- Rafael R. Sevilla <[EMAIL PROTECTED]> +63(2) 8177746 ext. 8311 Programmer, Inter.Net Philippines +63(917) 4458925 http://dido.engr.internet.org.ph/ OpenPGP Key ID: 0x5CDA17D8 _ Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph To leave: send "unsubscribe" in the body to [EMAIL PROTECTED] To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL PROTECTED]
