full-disclosure - Automated mass abuse of form mailers

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon Sep 12 19:31:45 2005
From: dufresne at winternet.com (Ron DuFresne)
Subject: Automated mass abuse of form mailers

On Mon, 12 Sep 2005, Michael Holzt wrote:

> Automated mass abuse of form mailers
>

	[smip]

Nothing new really, this has been an issue for many years now.  And often
the result of folks still using matt's cgi scripts <even our web masters
were as recent;ly as a year ago pointing our clients towards matt's
outdated and insecure versions>, despite his referecnes and links to the
moere secured version of his and other web based scripts that can be
gotten from:

http://nms-cgi.sourceforge.net/scripts.shtml

Unless one is carefull they often get what they paid for....

Thanks,

Ron DuFresne
-- 
"Sometimes you get the blues because your baby leaves you. Sometimes you get'em
'cause she comes back." --B.B. King
        ***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.