Creative Jar Blog RSS Feed

owssvr.dll : Hack Attempt?

March 26, 2008 11:37 by tim

Just had some SiteGuard mails about people trying to access http://www.mywebsite.com/_vti_bin/owssvr.dll

Initial thoughts were that somebody was trying to ascertain the presence of SharePoint on the server to possibly use it as an attack surface for some kind of hack

However, it would seem that it's a false alarm :¬)

Users with Microsoft Office and a version of Internet Explorer with the "Discuss" toolbar enabled are, indirectly, to blame for this 404.  The aforementioned toolbar does a request to owssvr.dll to see whehter or not the site has the ability to open the discussion panel

http://www.xav.com/scripts/guardian/help/1022.html for more info :¬)


Be the first to rate this post

  • Currently 0/5 Stars.
  • 1
  • 2
  • 3
  • 4
  • 5

Related posts

Comments

July 3. 2008 13:20

I have also found out that requests for MSOffice/cltreq.asp are copming from the same toolbar.

gareth

Add comment


 

  Country flag

[b][/b] - [i][/i] - [u][/u]- [quote][/quote]



Live preview

January 6. 2009 09:20

Calendar

January 2009
SuMoTuWeThFrSa
28293031123
45678910
11121314151617
18192021222324
25262728293031
1234567