[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] CGI email



> The present version of formmail doesn't provide an open relay. You
have to
> specify the hosts you are allowing relay for.

The present version of formmail is from 1996 and even if you put in a
host in the referrer part of the script, the script can still be
passed variables through a straight-on call that will bypass the host
referrer field.
Do a search in the archives for something akin to 'formmail exploit' -
or even on Google.
Don't ever use this on your machine.

CarrieB