"dman" <[EMAIL PROTECTED]> said:
> So I'm trying to exploit the script to make the site blacklist
> itself at dsbl.org.  I found a form on the site with the action
> as "/cgi-bin/formmail.cgi".

It's easy enough to find the details of the exploits of formmail.cgi version 1.9 and
less using a Google search on the bugTraq mailing list archive, for example, but it
isn't clear to me that it would do any good. The exploit lets you trick the cgi
script into sending mail to the destination of your choice. But that isn't
necessarily the same as what you have to do in order to get a mail server to send the
properly formatted message to DSBL. Not just any message will get a mail server
blacklisted.

 -- sidney



_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to