IE does this and I think office does as well.  Its looking for the front 
page extensions as implemented on IIS.  So theoretically users could 
affect changes on the server.  Its also an excellent way to open up a 
security hole!  :-)

In short, ignore them.  No good could come from them ;-)  (i.e. front page)

relevant more expansive information is here:

http://www.insecure.org/sploits/Microsoft.frontpage.insecurities.html

-Andy

Danny Angus wrote:

>Hi,
>
>This may be OT, pls forgive me..
>
>I'm using POI HSSF and Tomcat to deliver XLS workbooks full of *boring*
>stats, whenever I request my servlet via IE5 I see this output from Tomcat..
>
>2002-05-20 14:23:39 - Ctx() : Status code:404 request:R( /_vti_inf.html)
>msg:null
>2002-05-20 14:23:39 - Ctx() : Status code:404
>equest:R( /_vti_bin/shtml.exe/_vti_rpc) msg:null
>
>Can anyone tell me, what are "/_vti_inf.html" and
>"/_vti_bin/shtml.exe/_vti_rpc",
>and would it be worth my while building a servlet to respond to these
>requests?
>
>
>
>TIA
>d.
>
>
>
>--
>To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
>For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
>
>
>  
>




--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to