Got a Linux security question?

2003-02-03 Thread smcalearney
Need expert advice on a burning Linux security question? Every other month in Information Security magazine, the Linux Guru, Jay Beale, answers readers' questions. Please submit your questions to mailto:[EMAIL PROTECTED] *** This

Got a Linux security question?

2003-02-03 Thread smcalearney
Need expert advice on a burning Linux security question? Every other month in Information Security magazine, the Linux Guru, Jay Beale, answers readers' questions. Please submit your questions to mailto:[EMAIL PROTECTED]. *** This

unsuscribe

2003-02-03 Thread Mariana . Bence
-Mensaje original- De: Mike Barushok [mailto:[EMAIL PROTECTED] Enviado el: Lunes 3 de Febrero de 2003 04:15 Para: Stefaan Teerlinck Cc: debian-security@lists.debian.org Asunto: Re: formmail.pl Correction on my earlier reply, to find the location of all the formmail files, use: find /

Re: formmail.pl

2003-02-03 Thread David Hardne
Mike Barushok wrote on Feb 03, 2003 at 01:03:32 AM: > > Correction on my earlier reply, to find the location of all the > formmail files, use: > find /home/ -name formmail* > Better yet, use: find /home -iname "form*ail*" I regulary see files named Formmail, FormMail and formail etc.. -ina

unsuscribe

2003-02-03 Thread Mariana . Bence
-Mensaje original- De: Mike Barushok [mailto:[EMAIL PROTECTED]] Enviado el: Lunes 3 de Febrero de 2003 04:15 Para: Stefaan Teerlinck Cc: [EMAIL PROTECTED] Asunto: Re: formmail.pl Correction on my earlier reply, to find the location of all the formmail files, use: find /home/ -name fo

Re: formmail.pl

2003-02-03 Thread David Hardne
Mike Barushok wrote on Feb 03, 2003 at 01:03:32 AM: > > Correction on my earlier reply, to find the location of all the > formmail files, use: > find /home/ -name formmail* > Better yet, use: find /home -iname "form*ail*" I regulary see files named Formmail, FormMail and formail etc.. -ina

RE: formmail.pl

2003-02-03 Thread Jean-Marc V. Liotier
On Mon, 2003-02-03 at 07:56, Patrick Bucher wrote: > > There is a security-bug in the formmail.pl-script from matt wright. You > can use this script as an kind of "smtp-relay-server". I've found an > secure one located at ftp://ftp.monkeys.com/pub/formmail/ . No need to go that far : there formmai

Re: formmail.pl

2003-02-03 Thread Mike Barushok
Correction on my earlier reply, to find the location of all the formmail files, use: find /home/ -name formmail* (If all your sites are under /home/ ) On Mon, 3 Feb 2003, Stefaan Teerlinck wrote: > Hi, > > I have a server with a lot of name-based virtual hosts. On one of those > sites the fo

RE: formmail.pl

2003-02-03 Thread Patrick Bucher
Hi Stefaan, > I have a server with a lot of name-based virtual hosts. On > one of those sites the formmail.pl script is being abused, > a client is using an unsecure script. How can I find out > on what site this is? There is a security-bug in the formmail.pl-script from matt wright. You can us

Re: formmail.pl

2003-02-03 Thread Mike Barushok
something along the lines of: grep -r "formmail.pl" /var/log/apache/access/*.log | less will show the attempts on all the [domain_name].log files if they are in /var/log/apache/access/ grep -r "formmail.pl" /var/log/apache/access/*.log | grep -v 40 | less will filter out those that are 40X

formmail.pl

2003-02-03 Thread Stefaan Teerlinck
Hi, I have a server with a lot of name-based virtual hosts. On one of those sites the formmail.pl script is being abused, a client is using an unsecure script. How can I find out on what site this is? Thanks, Stefaan. <>