Girlie is out with an urgent fix Movable Type users should make today!
If you are using Movable Type's "Mail This Entry" feature on your blog, you are advised to rename your mt-send-entry.cgi file, or remove the feature entirely.The best advice at this point seems to be to rename the mt-send-entry.cgi file. Ben Trott has a code modification fix you can make now, and the bug will be fixed in the next version of MT.If you are not using the feature on your blog, you still need to either rename the script, disable it by changing the permissions, or remove it from your server altogether.
Spammers have discovered a means of using this script to send messages that will appear to be coming from your server.
Kudos to Woody for bringing it to everyones attention.
Update: Movable Type has issued a revised version of the file. If you're not using the functionality, there advice is to delete the file.
Permalink | E-mail This | Technorati Links | Sphere: Related Content | Digg this! | FARK It!
Filed under:
Tech Stuff
Comments (3)
Anybody know if there's a s... (Below threshold)1. Posted by jen | November 26, 2003 11:36 AM | Score: 0 (0 votes cast)
Anybody know if there's a similar problem for pMachine users?
1. Posted by jen | November 26, 2003 11:36 AM |
Score: 0 (0 votes cast)
Posted on November 26, 2003 11:36
2. Posted by King of Fools | November 26, 2003 12:22 PM | Score: 0 (0 votes cast)
You do mean rename 'mt-send-entry.cgi', right?
2. Posted by King of Fools | November 26, 2003 12:22 PM |
Score: 0 (0 votes cast)
Posted on November 26, 2003 12:22
3. Posted by Kathy K | November 27, 2003 10:57 AM | Score: 0 (0 votes cast)
pMachine seems ok for now. Though that's possibly because it's not quite as widely used and just hasn't been targeted yet...
3. Posted by Kathy K | November 27, 2003 10:57 AM |
Score: 0 (0 votes cast)
Posted on November 27, 2003 10:57