RE: [cobalt-users] FormMail Advice

["Fay, Sean" <webmaster@xxxxxxxxxxxxxxx>]

>> As for FormMail.pl 1.92, what specifically is wrong security wise in a
>> nutshell? He is asking me what you think the problems are that haven't
>> been addressed.

>He can look at FormMail.pl 1.92s and the README.security file, both of
>which can be found at:
>
>ftp://ftp.monkeys.com/pub/formmail/
>
>and at:
>
>ftp://ftp.nobaloney.net/FormMail

The readme file (http://www.scriptarchive.com/readme/formmail.html) says
that
"Version 1.91 is an update attempting to get rid of the worst problems that
have
been made public in: http://www.monkeys.com/anti-spam/formmail-advisory.pdf";

(Note that 1.92 is the current release)

The readme file at www.monkeys.com is dated Tue Jan 29 16:19:55 PST 2002.
That's well
after the latest versions from Matt have come out. Were the problems in the
original
monkeys.com notice not fixed? Matt claims they were. And I can't find
anything related
to FormMail.pl 1.92s on either FTP site. Just FormMail 1.9s.

Thanks,

Sean