Re: [SM-ADMIN] [SM-ANNOUNCE] SECURITY: SquirrelMail Web Server Status, and Plugins Update

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



SquirrelMail Email List wrote:
> Jon,
> 
> Thanks for your hard work. Is there a way to check our code that is on our 
> servers so we can check to see if we do have "Compromised" code. If it is 
> compromised we need to have our users change passwords.

Absolutely.  If you check the setup.php file of the mentioned
plugins, you will see something like:

  eval(base64_decode(

This is followed by a base64 encoded string, which contains several
PHP commands to disable error handling, then send an email.

-- 
Jon Angliss
<jon@xxxxxxxxxxxxxxxx>

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux