store | blogs | forums | twitter | facebook | wiki | mailing lists | downloads | support portal
Atomic Secure Linux
It is currently Fri May 24, 2013 5:53 am

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic Share/Bookmark  [ 2 posts ] 
Author Message
 Post subject: [vBulletin] Unknown issues with newattachment.php
Unread postPosted: Fri Apr 20, 2012 2:31 am 
Offline
New Forum User
New Forum User

Joined: Fri Apr 20, 2012 2:19 am
Posts: 1
Location: Germany
Hi all,

I recently installed asl-lite on my server and everything seems to work.

Just have a quick look in the logs today morning and dicovered some strange entries about newattachment.php of my vBulletion installation. The strange thing is: It doesn`t seem that there was a rule hit :shock:

Maybe someone can point me to the right direction.

Code:
--edb5441e-A--
[20/Apr/2012:00:36:57 +0200] T5CTU1UReiMAAGGACSQAAAAB 46.115.40.118 43250 [color=#FF0000]xxx[/color] 80
--edb5441e-B--
POST /newattachment.php HTTP/1.1
Accept: text/*
Content-Type: multipart/form-data; boundary=----------cH2ae0gL6Ij5Ij5KM7ae0Ef1ae0gL6
User-Agent: Shockwave Flash
Host: [color=#FF0000]xxx[/color]
Content-Length: 574807
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: bb_lastvisit=1333385389; bb_lastactivity=0

--edb5441e-F--
HTTP/1.1 400 Bad Request
Content-Length: 345
Connection: close
Content-Type: text/html; charset=iso-8859-1

--edb5441e-H--
Apache-Error: [file "core.c"] [line 3706] [level 3] File does not exist: /home/web1/public_html/400.shtml
Stopwatch: 1334874963956498 53536998 (- - -)
Stopwatch2: 1334874963956498 53536998; combined=215, p1=83, p2=0, p3=18, p4=102, p5=11, sr=0, sw=1, l=0, gc=0
WAF: ModSecurity for Apache/2.6.5 (http://www.modsecurity.org/).
Server: Apache

--edb5441e-Z--


Note: I have edited out URL and IP of my site just to be safe and because its not really safe for work ;)

For me it seems that there is a normal server error (why?) and despite the fact that it will be an upload of files apache tries later on to display the not set 404-Error-Page.

Even if its not really something with the rules; hopeing for your ideas and support.

Thanks and best regards,
Matthias


Top
 Profile  
 
 Post subject: Re: [vBulletin] Unknown issues with newattachment.php
Unread postPosted: Fri Apr 20, 2012 10:11 am 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7428
Location: earth
Yup, theres no rule being hit in that alert. Mod_security is just telling you that a 400 error code was detected. It actually has nothing to do with the WAF, your app is causing a "Bad Request" error.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic Share/Bookmark  [ 2 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group