RE: [cobalt-users] Fix for spammers and forms

["Jonothon Ortiz" <jon@xxxxxxxxx>]

Go to http://neworder.box.sk and do a search for FormMail to see the full
exploit information and how to patch it up without needing to download
anything.

Jonothon Ortiz
Vice President
Xnext, Inc.
Ph: 863.298.9698
or  888.84.XNEXT
http://www.Xnext.com
mailto:jon@xxxxxxxxx

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Charlie H.
Sent: Thursday, July 19, 2001 11:05 AM
To: Cobalt-Users
Subject: [cobalt-users] Fix for spammers and forms


I just wanted to let everyone know, that if they are running Matt's FormMail
script, that it is very easy for someone to use it for a spamming campaign.
We had this happen to a number of sites we host. The referrer check is very
easily bypassed, and I came across a patched version that appears to have
stopped this activity for now.

You can read about this hack and find the url for the fix at the bottom of
this page http://oliver.efri.hr/~crv/security/bugs/Others/fmail2.html .

Best Wishes,
Charlie

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users