Web Servers on Unix and Linux - how to filter this?

This is Interesting: Free IT Magazines  
Home > Archive > Web Servers on Unix and Linux > October 2004 > how to filter this?





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author how to filter this?
sam

2004-10-27, 7:46 am

Hi,

Recently my website received alot of buffer overflow attacks with the
following content:
1.2.3.4 - - [25/Oct/2004:10:05:34 +0800] "SEARCH
/ \x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
\xb1\x
02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x
02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x
02\xb1\x02\xb1\x02\xb1\
x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\
x02\xb1\x02\xb1\x02\xb1 ....
....


The apache has plugins mod_security and mod_filter compiled with.
How can I implement rules to filter the above attack?

Thanks
Sam
sam wun

2004-10-27, 7:46 am

sam wrote:

> Hi,
>
> Recently my website received alot of buffer overflow attacks with the
> following content:
> 1.2.3.4 - - [25/Oct/2004:10:05:34 +0800] "SEARCH
> / \x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02
\xb1\x
> 02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x
02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x
02\xb1\x02\xb1\x02\xb1\
>
> x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\
x02\xb1\x02\xb1\x02\xb1 ....
> ...
>
>
> The apache has plugins mod_security and mod_filter compiled with.
> How can I implement rules to filter the above attack?
>
> Thanks
> Sam

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com