From tomcat-dev-return-21902-apmail-jakarta-tomcat-dev-archive=jakarta.apache.org@jakarta.apache.org Thu May 24 10:22:11 2001 Return-Path: Delivered-To: apmail-jakarta-tomcat-dev-archive@jakarta.apache.org Received: (qmail 77433 invoked by uid 500); 24 May 2001 10:18:07 -0000 Mailing-List: contact tomcat-dev-help@jakarta.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: list-post: Reply-To: tomcat-dev@jakarta.apache.org Delivered-To: mailing list tomcat-dev@jakarta.apache.org Received: (qmail 77319 invoked from network); 24 May 2001 10:18:00 -0000 User-Agent: Microsoft-Entourage/9.0.1.3108 Date: Thu, 24 May 2001 11:18:01 +0100 Subject: FW: question From: "Pier P. Fumagalli" To: , Message-ID: In-Reply-To: <20010524060714.PAOW24006.n7-svc.kimo.com@n20.svc.kimo.com.tw> Mime-version: 1.0 Organization: Apache Software Foundation Content-type: multipart/mixed; boundary="B_3073547881_2423246" X-Spam-Rating: h31.sny.collab.net 1.6.2 0/1000/N > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3073547881_2423246 Content-type: text/plain; charset="ISO-8859-1" Content-transfer-encoding: quoted-printable Here's what it seems they did with the exploit... Rerolling the binaries *balls of Tomcat putting a new index.htm... I'm downloading the supposedly wrong binary as we speak, but it's kinda slo= w from my 56kbps connection... Fuck shit... Pier ------ Forwarded Message From: "casper" Reply-To: "casper" Date: Thu, 24 May 2001 14:07:14 +0800 To: "webmaster @ jakarta . apache . org" Subject: question Hi I download tomcat3.2.1 version software but when i to set my file in the \webapps .I find one file and file name is index.htm and this file is from china. i send this file to you,pls to check your server is okay and i have check m= y server is no any hacker. I download file date is 2001/05/23. If it's right pls send mail to me. thanks Casper =20 -------------------------------------------------------------------- ??????=B7????? http://mail.kimo.com.tw < ? ? ? ?=B7? ? ? ? > http://www.kimo.com.tw ------ End of Forwarded Message --B_3073547881_2423246 Content-type: text/plain; name="index.htm"; x-mac-creator="4D534945"; x-mac-type="54455854" Content-disposition: attachment Content-transfer-encoding: base64 PGh0bWw+PGJvZHkgYmdjb2xvcj1ibGFjaz48YnI+PGJyPjxicj48YnI+PGJyPjxicj48dGFi bGUgd2lkdGg9MTAwJT48dGQ+PHAgYWxpZ249ImNlbnRlciI+PGZvbnQgc2l6ZT03IGNvbG9y PXJlZD5mdWNrIFVTQSBHb3Zlcm5tZW50PC9mb250Pjx0cj48dGQ+PHAgYWxpZ249ImNlbnRl ciI+PGZvbnQgc2l6ZT03IGNvbG9yPXJlZD5mdWNrIFBvaXpvbkJPeDx0cj48dGQ+PHAgYWxp Z249ImNlbnRlciI+PGZvbnQgc2l6ZT00IGNvbG9yPXJlZD5jb250YWN0OnN5c2FkbWNuQHlh aG9vLmNvbS5jbjwvaHRtbD4N --B_3073547881_2423246--