Re: [gentoo-user] strange errors in http log, what can/should I do about it.

2022-02-28 Thread Grant Taylor
On 2/28/22 5:04 AM, Adam Carter wrote: If you put that url in a browser does it show your passwd file? I assume because the logs say 200 it will.  If so shut down the httpd and reset all the passwords Note the question mark after the leading slash. As such, the path traversal component is

Re[2]: [gentoo-user] strange errors in http log, what can/should I do about it.

2022-02-28 Thread Stefan Schmiedl
Montag, 28. Februar 2022 13:04: > On Monday, February 28, 2022, John Covici wrote: >> I got the following error this morning during my logwatch processing >> which I run daily and I would like to know if there is anything I can >> should do about it?  Seems to me it could be serious, if

Re: [gentoo-user] strange errors in http log, what can/should I do about it.

2022-02-28 Thread Adam Carter
On Monday, February 28, 2022, John Covici wrote: > I got the following error this morning during my logwatch processing > which I run daily and I would like to know if there is anything I can > should do about it? Seems to me it could be serious, if someone has > penetrated my server. > > A

[gentoo-user] strange errors in http log, what can/should I do about it.

2022-02-28 Thread John Covici
I got the following error this morning during my logwatch processing which I run daily and I would like to know if there is anything I can should do about it? Seems to me it could be serious, if someone has penetrated my server. A total of 4 possible successful probes were detected (the