Re: Dr. Watson on IIS 4.0
From: Ray (reply_in_at_news.only)
Date: 04/08/04
- Next message: Paul: "Relative file paths in IIS6"
- Previous message: Stefan Lauer: "Distributed File System and IIS"
- In reply to: Barak Turovsky: "Dr. Watson on IIS 4.0"
- Next in thread: Ken Schaefer: "Re: Dr. Watson on IIS 4.0"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 7 Apr 2004 21:30:27 -0400
Yeah, it's an attempted buffer flow from someone trying to take control of
your server. We started seeing these a few weeks ago and now I'm getting
them every day.
I STRONGLY suggest you download and install the URLScan tool from Microsoft
and get it installed as soon as possible. Among its other features, it will
stop overly long URLs like this from ever getting to your web server.
Ray
"Barak Turovsky" <baraktur@mail.ru> wrote in message
news:%23wXn4i1GEHA.2664@TK2MSFTNGP11.phx.gbl...
> Hi all,
>
> I have a web site running on IIS 4.0 on Windows NT 4.0 Server.
> The site is working perfectly for 3 years.
> Recently i have a strange problem while the IIS is crashing giving the Dr.
> Watson error very frequently.
> From IIS logs i learn that that cause for the crash is the search command,
> like this:
>
> "18:39:16 68.236.52.230 SEARCH
>
/
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> 301"
>
> After this command usually (not always) the server is crashing and i need
to
> restart it.
>
> The regular (good) command looks like this:
>
> 21:29:57 192.168.145.24 GET / 301
>
> Any ideas what could cause this crash and how to resolve the problem?
>
> Thanks a lot,
>
> Barak
>
>
>
>
- Next message: Paul: "Relative file paths in IIS6"
- Previous message: Stefan Lauer: "Distributed File System and IIS"
- In reply to: Barak Turovsky: "Dr. Watson on IIS 4.0"
- Next in thread: Ken Schaefer: "Re: Dr. Watson on IIS 4.0"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
