Gossamer Forum
Home : Products : Gossamer Mail : Discussion :

Re: [brewt] Outgoing Mail Problem

Quote Reply
Re: [brewt] Outgoing Mail Problem In reply to
Thanks for the reply. This is what I got back from our hosting tech support, who suspected a perl vulnerability might have been the culprit:

"The characteristics that led me to believe this yesterday were several perl processes that were running which weren't your typical perl process calling /admin/batch/pop3.pl These rogue Perl processes were calling / referencing a file in /tmp on the server which was owned by the apache user.

Once we killed the perl processes, killed the file, and flushed the queue of any email with "HotPfizer" in the from name, the spam did not return nor did the rogue perl processes, leading us to believe this was a perl injection, fitting the characteristics we have seen for another client who has a weak perl script."
Subject Author Views Date
Thread Outgoing Mail Problem system9 5343 Mar 25, 2014, 9:20 AM
Thread Re: [system9] Outgoing Mail Problem
brewt 5173 Apr 3, 2014, 1:35 PM
Post Re: [brewt] Outgoing Mail Problem
system9 5167 Apr 7, 2014, 9:53 AM