- What hack is this?

Tim Irwin tim at
Mon Jan 28 03:15:59 UTC 2002

> -----Original Message-----
> From: owner-nanog at [mailto:owner-nanog at]On Behalf Of
> John Palmer (NANOG Acct)
> Sent: Sunday, January 27, 2002 9:55 PM
> To: nanog at
> Cc: 'BSDI users List'
> Subject: - What hack is this?
> Anyone hear of some sort of a cracking method that uses cgi-bin/formmail?
> I've seen alot of these in my httpd/access_log files
> lately. I don't have anywhere on my system - I flushed all of
> the cgi-bin stuff that came with apache a long time ago.
> John

A quick search at reveals that there were a couple of
formmail security problems and loophole that spammers used dating back to
last year.  Here's a link to an email in the archive on
that has a brief synopsis:

Hope this helps,

More information about the NANOG mailing list