« I Can Think Of Worse Titles | Main | A Little Too Real »

Don't Become An Unknowing Source Of Spam

Girlie is out with an urgent fix Movable Type users should make today!

If you are using Movable Type's "Mail This Entry" feature on your blog, you are advised to rename your mt-send-entry.cgi file, or remove the feature entirely.

If you are not using the feature on your blog, you still need to either rename the script, disable it by changing the permissions, or remove it from your server altogether.

Spammers have discovered a means of using this script to send messages that will appear to be coming from your server.

The best advice at this point seems to be to rename the mt-send-entry.cgi file. Ben Trott has a code modification fix you can make now, and the bug will be fixed in the next version of MT.

Kudos to Woody for bringing it to everyones attention.

Update: Movable Type has issued a revised version of the file. If you're not using the functionality, there advice is to delete the file.


TrackBack

Listed below are links to weblogs that reference Don't Become An Unknowing Source Of Spam:

» King of Fools linked with Stop Spam

» Res Ipsa Loquitur linked with Important Anti-Spam MT Fix

» Blog House linked with MT vulnerability

» Chaos Magnet linked with Movable Type spam vulnerability

Comments (3)

Anybody know if there's a s... (Below threshold)
jen:

Anybody know if there's a similar problem for pMachine users?

You do mean rename 'mt-send... (Below threshold)

You do mean rename 'mt-send-entry.cgi', right?

pMachine seems ok for now. ... (Below threshold)

pMachine seems ok for now. Though that's possibly because it's not quite as widely used and just hasn't been targeted yet...




Advertisements









rightads.gif

beltwaybloggers.gif

insiderslogo.jpg

mba_blue.gif

Follow Wizbang

Follow Wizbang on FacebookFollow Wizbang on TwitterSubscribe to Wizbang feedWizbang Mobile

Contact

Send e-mail tips to us:

[email protected]

Fresh Links

Credits

Section Editor: Maggie Whitton

Editors: Jay Tea, Lorie Byrd, Kim Priestap, DJ Drummond, Michael Laprarie, Baron Von Ottomatic, Shawn Mallow, Rick, Dan Karipides, Michael Avitablile, Charlie Quidnunc, Steve Schippert

Emeritus: Paul, Mary Katherine Ham, Jim Addison, Alexander K. McClure, Cassy Fiano, Bill Jempty, John Stansbury, Rob Port

In Memorium: HughS

All original content copyright © 2003-2010 by Wizbang®, LLC. All rights reserved. Wizbang® is a registered service mark.

Powered by Movable Type Pro 4.361

Hosting by ServInt

Ratings on this site are powered by the Ajax Ratings Pro plugin for Movable Type.

Search on this site is powered by the FastSearch plugin for Movable Type.

Blogrolls on this site are powered by the MT-Blogroll.

Temporary site design is based on Cutline and Cutline for MT. Graphics by Apothegm Designs.

Author Login



Terms Of Service

DCMA Compliance Notice

Privacy Policy