Has anyone heard of any or some of the formmail.pl script that hackers are exploring? I hear there's a hole that allows a hacker to execute a GET on your server. Personally, I think is a lack of admins not knowing what they're doing with the script. But I will like to hear from others who may have information on this. There was a forum that was discussing this and so I wanted to hear from WHT users.

Thanks

The two problems I know of:

http://www.securityfocus.com/templates/archive.pike?list=1&mid=168634

http://packetstorm.securify.com/0007-exploits/formmail-xploit.pl


The later being a serious vulnerability, to some extent.


Hope that helps.


Lilac Echo
http://www.wbglinks.net