Hi! This is the ezmlm program. I'm managing the
bugtraq (AT) securityfocus (DOT) com mailing list.
I'm working for my owner, who can be reached
at bugtraq-owner (AT) securityfocus (DOT) com.
Messages to you from the bugtraq mailing list seem to
have been bouncing. I've attached a copy of the first bounce
message I received.
If this message bounces too, I will send you a probe. If the probe bounces,
I will remove your address from the bugtraq mailing list,
without further notice.
I've kept a list of which messages from the bugtraq mailing list have
bounced from your address.
Copies of these messages may be in the archive.
To retrieve a set of messages 123-145 (a maximum of 100 per request),
send an empty message to:
<bugtraq-get.123_145 (AT) securityfocus (DOT) com>
To receive a subject and author list for the last 100 or so messages,
send an empty message to:
<bugtraq-index (AT) securityfocus (DOT) com>
Here are the message numbers:
28184
Enclosed is a copy of the bounce message I received.
Return-Path: <>
Received: (qmail 27094 invoked from network); 11 2006 18:30:12 -0000
Received: from outgoing.securityfocus.com (HEL outgoing3.securityfocus.com) (205.206.231.27)
by lists2.securityfocus.com with SMTP; 11 2006 18:30:12 -0000
Received: from mail.securityfocus.com (mail.securityfocus.com [205.206.231.9])
by outgoing3.securityfocus.com (Postfix) with SMTP id 1844C2446F0
for <@lists2.securityfocus.com>; Wed, 11 2006 11:57:29 -0600 (MDT)
Received: (qmail 5753 invoked by alias); 11 2006 18:53:01 -0000
Message-ID: <20061011185301.5752.qmail (AT) mail (DOT) securityfocus.com>
Received: (qmail 5748 invoked from network); 11 2006 18:53:01 -0000
Received: from mail.devshed.com (84.40.21.254)
by mail.securityfocus.com with SMTP; 11 2006 18:53:01 -0000
Received: from mail.devshed.com ([84.40.21.254]) by mail.devshed.com
via smtpd (for mail.securityfocus.com [205.206.231.9]) with ESMTP; Wed, 11 2006 12:00:16 -0700
Received: (qmail 52086 invoked for bounce); 11 2006 15:00:58 -0400
Date: 11 2006 15:00:58 -0400
From: MAILER-DAEMN (AT) mail (DOT) devshed.com
To: @securityfocus.com
Subject: failure notice
Hi. This is the qmail-send program at mail.devshed.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<zprmci0jp (AT) pon (DOT) net>:
216.229.103.251 does not like recipient.
Remote host said: 450 4.1.1 <zprmci0jp (AT) pon (DOT) net>: Recipient address rejected: undeliverable address: host 216.229.96.251[216.229.96.251] said: 550 5.1.1 <zprmci0jp (AT) pon (DOT) netis not a valid mailbox (in reply to RCPT T command)
Giving up on 216.229.103.251.
I'm not going to try again; this message has been in the queue too long.
Below this line is a copy of the message.
Return-Path: <@securityfocus.com>
Received: (qmail 52075 invoked by uid 89); 11 2006 15:00:57 -0400
Received: from unknown (HEL m29.spamarrest.com) (66.150.163.132)
by 0 with SMTP; 11 2006 15:00:57 -0400
Received: from m2.spamarrest.com (m21b [10.1.1.21])
by m29.spamarrest.com (Postfix) with ESMTP id 5C71328074
for <securityarchive (AT) developershed (DOT) com>; Wed, 11 2006 12:00:52 -0700 (PDT)
X-SA-DELIVERED-T: <securityarchive (AT) developershed (DOT) com>
Received: from outgoing.securityfocus.com (outgoing.securityfocus.com [205.206.231.27])
by m2.spamarrest.com (Postfix) with ESMTP id AB4D812006B
for <securityarchive (AT) developershed (DOT) com>; Wed, 11 2006 12:00:57 -0700 (PDT)
Received: from outgoing.securityfocus.com by outgoing.securityfocus.com
via smtpd (for m2.spamarrest.com [66.150.163.173]) with ESMTP; Wed, 11 2006 11:54:23 -0700
Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20])
by outgoing3.securityfocus.com (Postfix) with QMQP
id AB68623AC57; Wed, 11 2006 10:29:50 -0600 (MDT)
Mailing-List: contact bugtraq-help (AT) securityfocus (DOT) com; run by ezmlm
Precedence: bulk
List-Id: <>
List-Post: <mailto:bugtraq (AT) securityfocus (DOT) com>
List-Help: <mailto:bugtraq-help (AT) securityfocus (DOT) com>
List-Unsubscribe: <mailto:bugtraq-unsubscribe (AT) securityfocus (DOT) com>
List-Subscribe: <mailto:bugtraq-subscribe (AT) securityfocus (DOT) com>
Delivered-To: mailing list bugtraq (AT) securityfocus (DOT) com
Delivered-To: moderator for bugtraq (AT) securityfocus (DOT) com
Received: (qmail 28362 invoked from network); 10 2006 23:08:04 -0000
Date: 10 2006 23:36:57 -0000
Message-ID: <20061010233657.3205.qmail (AT) securityfocus (DOT) com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.411 (Entity 5.404)
From: D-virus (AT) linuxmail (DOT) org
To: bugtraq (AT) securityfocus (DOT) com
Subject: gcards (languagefile) <= Remote File Include
gcards (languagefile) <= Remote File Include
Discovered by : DeatH VirUs
Dork : "powered by gcards"
(tasted on Version 1.13)
Exploit
code