From owner-freebsd-security Sun Sep 20 17:38:45 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id RAA14514 for freebsd-security-outgoing; Sun, 20 Sep 1998 17:38:45 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from locnar.336.net (locnar.336.net [207.69.181.130]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA14436 for ; Sun, 20 Sep 1998 17:38:27 -0700 (PDT) (envelope-from sevn@336.net) Received: from locnar.336.net (sevn@locnar.336.net [207.69.181.130]) by locnar.336.net (8.8.8/8.8.8) with SMTP id UAA22981; Sun, 20 Sep 1998 20:35:06 -0400 (EDT) (envelope-from sevn@336.net) Date: Sun, 20 Sep 1998 20:35:06 -0400 (EDT) From: Scott Wilson To: Brett Glass cc: "Jan B. Koum " , security@FreeBSD.ORG Subject: Re: Bogus hits on our Web server In-Reply-To: <199809210010.SAA12487@lariat.lariat.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I've seen this at work. formail is a perl cgi script that was written by Matt Wright. He has a site called Matt's Script Archive. From what I understand, there is a bulk email program out that that takes advantage of a deficiency in the code to send mass amounts of UCE. I wish I had more information. Scott Fine day to work off excess energy. Steal something heavy. On Sun, 20 Sep 1998, Brett Glass wrote: > By the way, just got a few more. What's this "formmail.pl" they're > testing for? > > --Brett > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message