[45280] in North American Network Operators' Group
Re: formmail.pl - What hack is this?
daemon@ATHENA.MIT.EDU (Andy Walden)
Sun Jan 27 22:13:05 2002
Date: Sun, 27 Jan 2002 20:10:09 -0600 (CST)
From: Andy Walden <andy@tigerteam.net>
To: "John Palmer (NANOG Acct)" <nanog@adns.net>
Cc: <nanog@merit.edu>
In-Reply-To: <011601c1a7a7$22eae140$c89d05c7@TAKA>
Message-ID: <Pine.LNX.4.33.0201272008210.21038-100000@vision.tigerteam.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
On Sun, 27 Jan 2002, John Palmer (NANOG Acct) wrote:
> Anyone hear of some sort of a cracking method that uses cgi-bin/formmail?
> I've seen alot of these in my httpd/access_log files
> lately. I don't have formmail.pl anywhere on my system - I flushed all of
> the cgi-bin stuff that came with apache a long time ago.
Search first next time:
http://www.google.com/search?hl=en&q=formmail+exploit&btnG=Google+Search
andy
--
PGP Key Available at http://www.tigerteam.net/andy/pgp
