Re: [cobalt-users] [RaQ3]Formmail widely server security

[flash22@xxxxxxx]

On Sun, 3 Feb 2002, Jeff Lasman wrote:
> 
> The problem of course is that our customers can run CGI, and they will. 
> And they'll find FormMail.  Usually an old version <frown>.  We now only
> allow FormMail.pl v.1.9s on our systems, but it's not easy to enforce

I talked with someone the other day who did a sneaky trick, he aliased
'formail.pl' to an error document server wide, so people installing it 'as
is' couldn't execute it, the users who are inclined to install 3 year old
versions generally don't realize they can simply rename it, and it also
quenches some of the tools that search for exploitable formail's....
[eg, he requires them to name it something else, like 'feedback.pl'

It's a somewhat odd solution, bit i thought it was kind of clever..


gsh