| > Surely you have the script name and timestamp next to
that?
| >
|
| Nope, that's the entire message.
|

Shame, you have some details but nothing leading to the
problem
without knowing which script... of many.

| >  If not, upgrade your httpd to something this side of
1900.
| >  ;)
|
| The httpd is a 1.3.19 version of Apache, not that old.

You need to look into the configuration then, since my
logfile
is punctuated with timestamps in the following way:

[Fri Jan  4 12:15:54 2002] [error] [client 192.168.100.1]
File does not exist:
/usr/local/httpd/htdocs/c/winnt/system32/cmd.exe
[Fri Jan  4 12:15:55 2002] [error] [client 192.168.100.1]
File does not exist:
/usr/local/httpd/htdocs/d/winnt/system32/cmd.exe
[Fri Jan  4 12:15:57 2002] [error] [client 192.168.100.1]
File does not exist:
/usr/local/httpd/htdocs/scripts/..%5c../winnt/system32/cmd.exe
[Fri Jan  4 12:15:58 2002] [error] [client 192.168.100.1]
File does not exist:
/usr/local/httpd/htdocs/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
[Fri Jan  4 12:15:59 2002] [error] [client 192.168.100.1]
File does not exist:
/usr/local/httpd/htdocs/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
[Fri Jan  4 12:16:01 2002] [error] [client 192.168.100.1]
File does not exist:
/usr/local/httpd/htdocs/msadc/..%5c../..%5c../..%5c/..Á^\../..Á^\../..Á^\../winnt/system32/cmd.exe


Now, doesn't that look very suspious eh?  That's the first
time I've noticed... and it is on a private home lan.  Time
for the virus checkers I think...

| > >
| > > I'm not too sure which script it comes from, it
doesn't
| > > say, but I think it is from a CGI get form when a
user
| > > doesn't enter a required field.
| > >
| > > Any idea what I should be looking for?
| >
| >Poorly written code.  Grep for "DBD::InterBase::st" in
your
| >script dirs.
| 
| Uh, yeah, thanks, that's mostly all 300 of them. :\
| 
| It doesn't happen often, just I don't like error logs
filling
| up at all if the software can help.
|
| What "Poorly written code" do you suggest I look for?

It seemed like good advice at the time...

as I suggest above, working on this issue should involved
getting those timestamps/script names on, since that'll
lead you to the problem - and make the accounts look a
little better and easier to solve this/other problems with.

You and I currently do not have enough information to fix
this.

Jonathan Paton

__________________________________________________
Do You Yahoo!?
Everything you'll ever need on one web page
from News and Sport to Email and Music Charts
http://uk.my.yahoo.com

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to