Re: [SM-ADMIN] [SM-USERS] [SM-ANNOUNCE] SECURITY: SquirrelMail Web Server Status, and Plugins Update
SquirrelMail Email List <[email protected]>
| Newsgroups | gmane.mail.squirrelmail.plugins,gmane.mail.squirrelmail.user,gmane.mail.squirrelmail.devel |
|---|---|
| Message-ID | <[email protected]> |
Jon, Thanks! I did a grep on each plugin directory for "base64_decode" and found nothing. Good news. Thanks again, Ken On Sat, 1 Aug 2009, Jon Angliss wrote: > SquirrelMail Email List wrote: >> Jon, >> >> Thanks for your hard work. Is there a way to check our code that is on our >> servers so we can check to see if we do have "Compromised" code. If it is >> compromised we need to have our users change passwords. > > Absolutely. If you check the setup.php file of the mentioned > plugins, you will see something like: > > eval(base64_decode( > > This is followed by a base64 encoded string, which contains several > PHP commands to disable error handling, then send an email. > > -- > Jon Angliss > <[email protected]> > > ------------------------------------------------------------------------------ > Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day > trial. Simplify your report design, integration and deployment - and focus on > what you do best, core application coding. Discover what's new with > Crystal Reports now. http://p.sf.net/sfu/bobj-july > ----- > squirrelmail-plugins mailing list > Posting guidelines: http://squirrelmail.org/postingguidelines > List address: [email protected] > List archives: http://news.gmane.org/gmane.mail.squirrelmail.plugins > List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins > ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ----- squirrelmail-plugins mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: [email protected] List archives: http://news.gmane.org/gmane.mail.squirrelmail.plugins List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins