[ale] OT: _vti_bin/owssvr.dll

[Jim Popovitch]

On Tue, 2005-06-07 at 13:17 -0400, Jay Loden wrote:
> To the best of my knowledge, it's because of Frontpage Extensions. If you 
> remove them from your Apache install, it supposedly goes away. 

There is not FP extensions on that site, those errors just show up in
the log files.  So far, the consensus is that these are valid/legit
requests from IE browsers that have MS Office extensions enabled.  These
extensions are checking to see if the webserver supports MS extensions
(including FP presumably) However, in the past, there was some
hacks/cracks for owssvr.dll so webservers are unable to determine if the
request is an innocent user or an attempt to hack something that doesn't
exist.

-Jim P.

> 
> -Jay
> 
> On Monday 06 June 2005 09:38 pm, Jim Popovitch wrote:
> > If a client requests _vti_bin/owssvr.dll from your webserver, what is
> > the reason?
> >
> > I've gotten 3 different opinions on this:
> >
> >   A)  MS Frontpage does this when opening a website
> >
> >   b)  It's a virus/hack attempt
> >
> >   c)  It's nothing to worry about, happens to me all the time.
> >
> > Just looking for a consensus.
> >
> > -Jim P.
> >
> > _______________________________________________
> > Ale mailing list
> > Ale at ale.org
> > http://www.ale.org/mailman/listinfo/ale
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale