07-03-04 02:23 AM
My fully patched, firewall-enabled, VirusScan-and-PestPatrol running Windows
2003 was tagged twice this week. The tagger's directories were owned by the
IUSR_ account, which has not write access to the ftproot folder.
I found this link to a disturbing report about IIS6/ASP holes:
http://xforce.iss.net/xforce/xfdb/12687
I am no forensics expert, and have limited resources to explore this - in ot
her words, the server is still running (so far the tagger hasn't come back).
Any specific suggestion on what to look for would be much appreciated.
[ Post a follow-up to this message ]
| 
