Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <alpine.BSF.2.00.1410070434460.13577@aneurin.horsfall.org>
Date: Tue, 7 Oct 2014 04:36:20 +1100 (EST)
From: Dave Horsfall <dave@...sfall.org>
To: oss-security@...ts.openwall.com
Subject: Re: automated phishing email

On Mon, 6 Oct 2014, Mason Loring Bliss wrote:

> A co-worker suggested that this might have been aimed at procmail.
> 
>     https://bpaste.net/show/41323f7d9b35
> 
> I'm curious if anyone has thoughts about what the target might have been for
> this attempt.

Pardon me for being new here, but that looks suspiciously like a 
Shellshock type of attack.  Is Procmail also vulnerable to that sort of 
thing?

-- Dave

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.