Home page logo

bugtraq logo Bugtraq mailing list archives

Re: Suspicious Mail
From: dave () esi com au (Dave Horsfall)
Date: Fri, 10 Mar 1995 10:11:29 +1000 (EST)

On Thu, 9 Mar 1995, David Guerrero wrote:

I'm not sure what is it.... could it be a probing for the recent bug of
identd in sendmail, or something like this...

No - it's probing for an old bug in Sendmail, which is not to say that
similar bugs still exist if you are still running 4.1.1 SunOS.

550 | sed '1,/^$/d' | sh... Host unknown

Someone is trying to pipe shell commands from the body of the message.

Received: from i60s14.ira.uka.de by sobrino.eui.upm.es (4.1/3.1) [...]

You might want to drop a line to the Postmaster at this site; then again,
it could have been forged.

Dave Horsfall (VK2KFU) | dave () esi com au | VK2KFU @ VK2AAB.NSW.AUS.OC | PGP 2.6
Opinions expressed are mine. | E7 FE 97 88 E5 02 3C AE  9C 8C 54 5B 9A D4 A0 CD

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]