/img/snapshot.cgi

Gary Artim gartim at gmail.com
Tue Feb 18 19:27:34 UTC 2014


Anyone seen in their logwatch output:

A total of 1 possible successful probes were detected (the following URLs
 contain strings that match one or more of a listing of strings that
 indicate a possible exploit):

    /img/snapshot.cgi?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\x88\x9b
HTTP Response 301

I have no snapshot.cgi code, but sounds like a redirect (301)...any
ideas out there? thanks much!


More information about the users mailing list