old Frontpage attack kills Apache?

Anyone seen this behavior?

An old Windows hack, very long HTTP request for _vti_bin/_vti_aut/fp30reg.dll

Resulting in:

[Fri Feb 11 07:40:32 2005] [error] [client x.x.x.x] request failed: URI too long


And sometimes *also* resulting in Apache croaking first, load skyrocketing, and usually additionally requiring a hard reset? (ouch!)

We don't *know* that these requests are causing the crashes, but they do seem to be immediately preceding them.

This is on RH9/Progeny-based systems running either Apache 1.3.31 or 1.3.33.

Ideas?

 

 

 

 

Top