[lug] possible intrusion

[bdoctor at ps-ax.com]

You may wish to subscribe to some security mailing lists.  I recommend some of
the Security Focus lists -- www.securityfocus.com.  Specifically, the incidents,
and the bugtraq lists are very helpful.  This is a known exploit.

-brad

> I am getting a few of these on port 80:
> 
> [19/Jul/2001:07:48:26 -0600] "GET /default.ida?NNNNNNNN
> (many more NNN's).....NNNN%u9090%u6858%ucbd3%u7801%u9090%u.....
> 
> which looks like buffer overflow intrusion.
> 
> Does anyone know more about this?
> 
> thanks,
> 
> Samartha
> 
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
>