Need expert advice on a burning Linux security question? Every other month
in Information Security magazine, the Linux Guru, Jay Beale, answers
readers' questions. Please submit your questions to
mailto:[EMAIL PROTECTED]
***
This
Need expert advice on a burning Linux security question? Every other month
in Information Security magazine, the Linux Guru, Jay Beale, answers
readers' questions. Please submit your questions to
mailto:[EMAIL PROTECTED].
***
This
-Mensaje original-
De: Mike Barushok [mailto:[EMAIL PROTECTED]
Enviado el: Lunes 3 de Febrero de 2003 04:15
Para: Stefaan Teerlinck
Cc: debian-security@lists.debian.org
Asunto: Re: formmail.pl
Correction on my earlier reply, to find the location of all the
formmail files, use:
find /
Mike Barushok wrote on Feb 03, 2003 at 01:03:32 AM:
>
> Correction on my earlier reply, to find the location of all the
> formmail files, use:
> find /home/ -name formmail*
>
Better yet, use:
find /home -iname "form*ail*"
I regulary see files named Formmail, FormMail and formail etc..
-ina
-Mensaje original-
De: Mike Barushok [mailto:[EMAIL PROTECTED]]
Enviado el: Lunes 3 de Febrero de 2003 04:15
Para: Stefaan Teerlinck
Cc: [EMAIL PROTECTED]
Asunto: Re: formmail.pl
Correction on my earlier reply, to find the location of all the
formmail files, use:
find /home/ -name fo
Mike Barushok wrote on Feb 03, 2003 at 01:03:32 AM:
>
> Correction on my earlier reply, to find the location of all the
> formmail files, use:
> find /home/ -name formmail*
>
Better yet, use:
find /home -iname "form*ail*"
I regulary see files named Formmail, FormMail and formail etc..
-ina
On Mon, 2003-02-03 at 07:56, Patrick Bucher wrote:
>
> There is a security-bug in the formmail.pl-script from matt wright. You
> can use this script as an kind of "smtp-relay-server". I've found an
> secure one located at ftp://ftp.monkeys.com/pub/formmail/ .
No need to go that far : there formmai
Correction on my earlier reply, to find the location of all the
formmail files, use:
find /home/ -name formmail*
(If all your sites are under /home/ )
On Mon, 3 Feb 2003, Stefaan Teerlinck wrote:
> Hi,
>
> I have a server with a lot of name-based virtual hosts. On one of those
> sites the fo
Hi Stefaan,
> I have a server with a lot of name-based virtual hosts. On
> one of those sites the formmail.pl script is being abused,
> a client is using an unsecure script. How can I find out
> on what site this is?
There is a security-bug in the formmail.pl-script from matt wright. You
can us
something along the lines of:
grep -r "formmail.pl" /var/log/apache/access/*.log | less
will show the attempts on all the [domain_name].log files if they
are in /var/log/apache/access/
grep -r "formmail.pl" /var/log/apache/access/*.log | grep -v 40 | less
will filter out those that are 40X
Hi,
I have a server with a lot of name-based virtual hosts. On one of those
sites the formmail.pl script is being abused, a client is using an
unsecure script. How can I find out on what site this is?
Thanks,
Stefaan.
<>
11 matches
Mail list logo