Apache CGI: Error Message

Problems with the Windows version of XAMPP, questions, comments, and anything related.

Apache CGI: Error Message

Postby bruce2012 » 27. January 2014 01:57

Hello team, I was checking my Apache error.log and I found that there some CGI error msgs every few days. here is one example that I just got today.

cgi:error pid 5792:tid 1712 [client 93.114.82.133:60375] script not found or unable to stat" c:/xampp/cgi-bin/php



I did research and I could not figure out why? I also do not know if this is serious or not. it happens every few days or while. I am running as building in "Administrator" on the server. so I should not have permission issues.

Thank you in advance!
bruce2012
 
Posts: 12
Joined: 12. November 2012 00:49
XAMPP Version: 5.6.3
Operating System: window 7

Re: Apache CGI: Error Message

Postby JJ_Tagy » 27. January 2014 02:16

It's just phishing. Looks like you opened external access to your server.
JJ_Tagy
 
Posts: 514
Joined: 30. January 2012 13:44
XAMPP Version: 1.8.3
Operating System: Windows 7 x64

Re: Apache CGI: Error Message

Postby bruce2012 » 27. January 2014 03:07

JJ_Tagy, yes. we setup external access because we need for live environment testing. so I guess that there is nothing wrong with Apache server setting and we do not need to worry about it. right? Thank you for helping!
bruce2012
 
Posts: 12
Joined: 12. November 2012 00:49
XAMPP Version: 5.6.3
Operating System: window 7

Re: Apache CGI: Error Message

Postby Altrea » 27. January 2014 05:50

XAMPP is not configured for live, production or public accessible environments. It is not secure enough and you cannot patch known vulnerabilities in single components that easy.

So if you have secured the XAMPP components enough or do not care about being a member in a bot net you don't need to worry. Otherwise you should.
We don't provide any support via personal channels like PM, email, Skype, TeamViewer!

It's like porn for programmers 8)
User avatar
Altrea
AF Moderator
 
Posts: 6536
Joined: 17. August 2009 13:05
XAMPP Version: 5.5.19
Operating System: W7Ux64

Re: Apache CGI: Error Message

Postby bruce2012 » 27. January 2014 05:57

Hi Altrea, I got it. thank you for the information!
bruce2012
 
Posts: 12
Joined: 12. November 2012 00:49
XAMPP Version: 5.6.3
Operating System: window 7

Re: Apache CGI: Error Message

Postby Altrea » 27. January 2014 06:04

You are welcome.
We don't provide any support via personal channels like PM, email, Skype, TeamViewer!

It's like porn for programmers 8)
User avatar
Altrea
AF Moderator
 
Posts: 6536
Joined: 17. August 2009 13:05
XAMPP Version: 5.5.19
Operating System: W7Ux64

stop /cgi-bin/ attacks

Postby bruce2012 » 17. February 2014 05:18

Hello all, I notice that there are lots of cgi:error in my apache error log. here are some samples:


[Sun Feb 16 09:14:26.277308 2014] [cgi:error] [pid 4752:tid 1728] [client 202.158.37.2:12576] script not found or unable to stat: C:/xampp/cgi-bin/php
[Sun Feb 16 09:14:26.714109 2014] [cgi:error] [pid 4752:tid 1720] [client 202.158.37.2:12652] script not found or unable to stat: C:/xampp/cgi-bin/php5
[Sun Feb 16 09:14:27.150910 2014] [cgi:error] [pid 4752:tid 1752] [client 202.158.37.2:12745] script not found or unable to stat: C:/xampp/cgi-bin/php-cgi
[Sun Feb 16 09:14:27.587711 2014] [cgi:error] [pid 4752:tid 1748] [client 202.158.37.2:12816] script not found or unable to stat: C:/xampp/cgi-bin/php.cgi
[Sun Feb 16 09:14:28.008911 2014] [cgi:error] [pid 4752:tid 1744] [client 202.158.37.2:12861] script not found or unable to stat: C:/xampp/cgi-bin/php4
[Sun Feb 16 09:18:39.700750 2014] [cgi:error] [pid 4752:tid 1728] [client 213.167.153.173:34001] script not found or unable to stat: C:/xampp/cgi-bin/php
[Sun Feb 16 09:18:40.652352 2014] [cgi:error] [pid 4752:tid 1748] [client 213.167.153.173:34108] script not found or unable to stat: C:/xampp/cgi-bin/php5
[Sun Feb 16 09:18:41.120353 2014] [cgi:error] [pid 4752:tid 1744] [client 213.167.153.173:34195] script not found or unable to stat: C:/xampp/cgi-bin/php-cgi
[Sun Feb 16 09:18:41.635154 2014] [cgi:error] [pid 4752:tid 1720] [client 213.167.153.173:34256] script not found or unable to stat: C:/xampp/cgi-bin/php.cgi
[Sun Feb 16 09:18:42.087554 2014] [cgi:error] [pid 4752:tid 1752] [client 213.167.153.173:34303] script not found or unable to stat: C:/xampp/cgi-bin/php4



How can I prevent this kind of attack? I am not sure if they did some damages or not at the movement? can I make /cgi-bin/ folder not accessible in xampp apache

Please advise? thank you!!!
bruce2012
 
Posts: 12
Joined: 12. November 2012 00:49
XAMPP Version: 5.6.3
Operating System: window 7

Re: Apache CGI: Error Message

Postby Altrea » 17. February 2014 05:34

Hi Bruce,

Merged with your other thread. The answer is still the same.
=> [INFO] How to not fail getting help here (section "Scope of support" for live, production or public accessible environments)

Best wishes,
Altrea
We don't provide any support via personal channels like PM, email, Skype, TeamViewer!

It's like porn for programmers 8)
User avatar
Altrea
AF Moderator
 
Posts: 6536
Joined: 17. August 2009 13:05
XAMPP Version: 5.5.19
Operating System: W7Ux64

Re: Apache CGI: Error Message

Postby bruce2012 » 17. February 2014 06:24

Altrea, you are right, sorry... I forgot the older thread. Thank you
bruce2012
 
Posts: 12
Joined: 12. November 2012 00:49
XAMPP Version: 5.6.3
Operating System: window 7


Return to XAMPP for Windows

Who is online

Users browsing this forum: No registered users and 60 guests