Child's Play Technologies

What does a bad request for "cmd.exe" mean?

Everyone is aware security risks are involved when using the internet. Based on research, we have found that requests for "cmd.exe" are requests for information on the web server and system and is probably a precursor for a security attack. A request of this type assumes the "cmd.exe" directory does not exist on the server. This will return a "404 Error-Page Not Found." This request will then return information about your server such as Microsoft IIS 5.0. If the information given is useful to the hacker, more requests may come in the near future.

It is also possible, a hacker is attempting to run a program on your system. Typically, the cmd.exe is the Windows command used to open up the dos window. So, in this case, an attacker is attempting to open up the command line interface on the server. If this does work, a hacker may be able to wreak havoc on your system.

Child's Play Technologies has security in place to prevent attacks on your information from occurring. If you are consistently finding these requests, please notify us.

Copyright 2002, Child's Play Technologies, LLC