RE: [cobalt-users] Spammer sending from httpd on our RaQ3

["Andy Brown" <andy.brown@xxxxxxxxxxxxx>]

> Someone is sending spam via one of our RaQs, they've 
> apparently found a way to send mail as if it were coming from 
> the http daemon.  Not sure just how to disable this, 
> particularly in a way that the GUI won't re-enable next time 
> we add an email account.  Any ideas?  
> 



Hi,
This looks to me like a formmail.cgi vulnerability. Make sure any sites
on your server are using the most up to date version of the formmail.cgi
script
Check out: http://www.worldwidemart.com/scripts/formmail.shtml for the
update information. The new version is 1.9 and released august 3rd. I'd
advise all your raq users to update their formmail scripts if they
haven't already.

Regards,
Andy
andy@xxxxxxxxxxxxxxxxxxxxx
http://ineedlinux.info/
http://www.linuxnetworking.co.uk