full-disclosure - Odd logs

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [month] [year] [list]

From: peter at ucsc.edu (peter moody)
Subject: Odd logs

The connect method can be used to turn a web server into an open proxy.

open proxies are the new open relays.  If the connect method had
succeeded, I can guarantee that your web server would be getting used to
spam right now.

-Peter

On Wed, 2003-06-04 at 09:31, Mark wrote:
> The exert from my log files which had the same (but cant say it caused
> me
> any concern)
> 
> dhpp.csudh.edu - - [01/Jun/2003:21:27:08 +0100] "CONNECT 1.3.3.7:1337
> HTTP/1.0" 405 303 "-" "-"
> 
> 
>                          Mark
>                 www.vulndev.org/~mark/
>    If you know yourself, knowing the enemy does not matter.
>                 -- Sun Tzu - The Art of War
>                         (Adapted)
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
-- 
Peter Moody                             <peter@...c.edu>
InfoSec Administrator                   831/459.5409
Communications and Technology Services. http://mustard.ucsc.edu/pubkey
UC, Santa Cruz.
:wq
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030604/148dd469/attachment.bin