I have built a website that has been implemented on AS/400 running on WebSphere 5.0. In the SystemOut.log I am continually seeing the following 2 errors. Does anyone know what these are and how I can fix them so that they stop showing up in the logs.
Sun Certified Java2 Programmer - 1.4 - SCJP<br />Sun Certified Web Component Developer for J2EE Platform - SCWCD
Hm ... all IBM and Sun code there. Have you reported it to them?
Joined: Nov 17, 2003
I have not yet reported these problems to either Sun or IBM. I wanted to see if anyone had run into anything similar first. Since it is not any of our custom application code it has been difficult to debug.
Joined: Mar 04, 2004
A little googling identified that the PROPFIND method referred to in the first exception is a nonstandard extension to HTTP that started being used for a worm/trojan starting around 2002. My guess is someone is trying to insert a trojan into your system by exploiting a buffer overflow bug in Microsoft IIS - but fortunately you're not running IIS, so you're not vulnerable. (They're probably not attacking your machine specifically, but rather just scanning the net and attacking any vulnerable machines.)
I don't know why WebSphere is throwing an exception instead of just logging the bad request. That might be worth asking IBM.
The second exception is a NullPointerException, so a null pointer was probably created in your code and then passed around for a while before it caused the exception. That's likely to be painful to track down - the best way is probably to put in a few score asserts to catch null pointers early and run the code with them for a while.