[Security] mailbomb

root root@gate.polarhome.com
Thu, 17 Jan 2002 12:05:43 +0100 (CET)


hi,

user tools:

Login: tools                            Name: vytenioplas
Directory: /home/t/tools                Shell: /bin/bash
Office: LT, vytenis@kaunas.omnitel.net
Last login Wed Jan 16 21:55 (CET) on ftp from 212.47.122.157

with perl CGI script server sms.tele2.dk was mailbombed.

I don't really know was it an attack against polarhome or tele2.dk because 
both servers refused mail requests, creating loop between smtp daemons and 
applications.

Because of this incident perl has been disabled for all users, until we 
find some secure way to use it.

Denied users:
tools
and 
Login: perl                             Name: vytenis
Directory: /home/p/perl                 Shell: /bin/bash
Office: LT, vyteniz@centras.lt
Last login Wed Jan 16 21:52 (CET) on ftp from 212.47.122.157

Shame on you... 
I was a chicken attack that hacker can not be proud.

root