Re: Formmail and spam attack

by "Darrell King" <darrell(at)webctr.com>

Date:	Tue, 22 Oct 2002 15:52:58 -0400
To:	<hwg-techniques(at)mail.hwg.org>
References:	rr
	todo: View Thread, Original

Our servers are upgrading AND renaming the formmail scripts because of this.

D

----- Original Message ----- 
From: custom 


This weekend I made the unpleasant discovery that a spammer was
apparently using a formmail script on my client's site to send out porno
spam. Thousands of messages went out, all with my client's return
address.

The tech folks at the hosting company said spammers can exploit a
weakness in formmail to launch their email. They recommended upgrading my
version (I had 1.9 and I found 1.92 at Matt's Script Archive).

Has this happened to anyone here? Is the recommendation I received
sufficient or are there other steps I should take?

HWG hwg-techniques mailing list archives, maintained by Webmasters @ IWA