[Mailman-Users] message about probes

Gruver, Sandi sgruver at cis.ctc.edu
Mon Apr 27 22:55:47 CEST 2009


>From the mailman server's Logwatch program:

A total of 1 sites probed the server
  62.1.205.86

!!!! 2 possible successful probes
 /mailman/private/sqlhelp///includes/session.php?baseDir=../../../../../../../../etc/passwd HTTP Response 200
 /mailman/admin///includes/session.php?baseDir=../../../../../../../../etc/passwd HTTP Response 200

Is this likely a probe only or a notification of a compromise?


Thank you,







More information about the Mailman-Users mailing list