North American Network Operators Group|
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical
Re: formmail.pl - What hack is this?
On Sun, Jan 27, 2002 at 08:54:42PM -0600, John Palmer (NANOG Acct) wrote: > > Anyone hear of some sort of a cracking method that uses cgi-bin/formmail? > I've seen alot of these in my httpd/access_log files > lately. I don't have formmail.pl anywhere on my system - I flushed all of > the cgi-bin stuff that came with apache a long time ago. Spammers use it for sending spam. Early versions of FormMail didn't do any input checking and could be used to send mail to any recipient. -j