- What hack is this?

Jeff Wasilko jeffw at
Mon Jan 28 03:06:38 UTC 2002

On Sun, Jan 27, 2002 at 08:54:42PM -0600, John Palmer (NANOG Acct) wrote:
> Anyone hear of some sort of a cracking method that uses cgi-bin/formmail?
> I've seen alot of these in my httpd/access_log files
> lately. I don't have anywhere on my system - I flushed all of
> the cgi-bin stuff that came with apache a long time ago.

Spammers use it for sending spam. Early versions of FormMail
didn't do any input checking and could be used to send mail to
any recipient.


More information about the NANOG mailing list