Sendmail Vulnerability?

  • Resolved alanmtk

    (@alanmtk)


    9 years, 2 months ago

    Recently I was adviced by my hosting service that my site was generating problems to the server and they provided me this log:

    Time: Sat Nov 21 17:40:44 2015 -0500
    Path: ‘/home/******/public_html/wp-content/plugins/custom-post-type-ui/js’
    Count: 101 emails sent

    Sample of the first 10 emails:

    2015-11-21 17:34:19 cwd=/home/******/public_html/wp-content/plugins/custom-post-type-ui/js 4 args: /usr/sbin/sendmail -t -i -fleah_davis@******.com
    2015-11-21 17:34:19 cwd=/home/******/public_html/wp-content/plugins/custom-post-type-ui/js 4 args: /usr/sbin/sendmail -t -i -fmarion_reyes@******.com
    2015-11-21 17:34:19 cwd=/home/******/public_html/wp-content/plugins/custom-post-type-ui/js 4 args: /usr/sbin/sendmail -t -i -fmarion_reyes@******.com
    2015-11-21 17:34:20 cwd=/home/******/public_html/wp-content/plugins/custom-post-type-ui/js 4 args: /usr/sbin/sendmail -t -i -fmarion_reyes@******.com
    2015-11-21 17:34:20 cwd=/home/******/public_html/wp-content/plugins/custom-post-type-ui/js 4 args: /usr/sbin/sendmail -t -i -fleah_davis@******.com
    2015-11-21 17:34:20 cwd=/home/******/public_html/wp-content/plugins/custom-post-type-ui/js 4 args: /usr/sbin/sendmail -t -i -fmarion_reyes@******.com
    2015-11-21 17:34:20 cwd=/home/******/public_html/wp-content/plugins/custom-post-type-ui/js 4 args: /usr/sbin/sendmail -t -i -fleah_davis@******.com
    2015-11-21 17:34:20 cwd=/home/******/public_html/wp-content/plugins/custom-post-type-ui/js 4 args: /usr/sbin/sendmail -t -i -fmarion_reyes@******.com
    2015-11-21 17:34:20 cwd=/home/******/public_html/wp-content/plugins/custom-post-type-ui/js 4 args: /usr/sbin/sendmail -t -i -fleah_davis@******.com
    2015-11-21 17:34:20 cwd=/home/******/public_html/wp-content/plugins/custom-post-type-ui/js 4 args: /usr/sbin/sendmail -t -i -fmarion_reyes@******.com

    I cant provide the version that was causing this problem since my customer decided to update plugins without asking me.

    The hosting provider decided to disable my site until I fix that. I updated everything to the latest version, should I do something else? Is it a known error?

    Thanks!

Viewing 2 replies - 1 through 2 (of 2 total)

  • Just commenting here to get email updates on this thread.

    Plugin Contributor Michael Beckwith

    (@tw2113)

    The BenchPresser

    I am honestly not sure what’s going on here, as CPTUI doesn’t do anything with emailing anything or anyone, at least not officially. It’s possible the files were modified afterwards by someone/something malicious.

    Should be safe to re-install the plugin safely, if necessary. You won’t lose content/settings you have already created.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Sendmail Vulnerability?’ is closed to new replies.