Re: [SM-ADMIN] [SM-USERS] [SM-ANNOUNCE] SECURITY: SquirrelMail Web Server Status, and Plugins Update
Jon Angliss <[email protected]>
| Newsgroups | gmane.mail.squirrelmail.devel,gmane.mail.squirrelmail.user,gmane.mail.squirrelmail.plugins |
|---|---|
| Message-ID | <[email protected]> |
SquirrelMail Email List wrote: > Jon, > > Thanks for your hard work. Is there a way to check our code that is on our > servers so we can check to see if we do have "Compromised" code. If it is > compromised we need to have our users change passwords. Absolutely. If you check the setup.php file of the mentioned plugins, you will see something like: eval(base64_decode( This is followed by a base64 encoded string, which contains several PHP commands to disable error handling, then send an email. -- Jon Angliss <[email protected]> ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ----- squirrelmail-devel mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: [email protected] List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel