Re: <victim>server formmail.pl exploit in the wild

["Christopher X. Candreva" <chris () westnet com>]

On Fri, 12 Apr 2002, Noel Rosenberg wrote:

> FormMail 1.9 (and lower) is insecure and should be replaced.

For anyone looking for a replacement, I hightly recomend cgiemail from MIT:

http://web.mit.edu/wwwdev/cgiemail/

It takes all it's information from a plain text file template, so spoofing
from fields shouldn't come in to play.

==========================================================
Chris Candreva  -- chris () westnet com -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com