Re: [Exim] Bug in MySQL/SMTP Authentication config code

Top Page
Delete this message
Reply to this message
Author: James W. Brinkerhoff
Date:  
To: exim-users
Subject: Re: [Exim] Bug in MySQL/SMTP Authentication config code
On Thursday 22 April 2004 05:05 am, The Computer Geek wrote:
> We started to look through the logfiles and didn't at first see anything
> strange until yesterday when we noticed that SMTP authentications were
> being accepted by any username with no password.
>
> Users should look for "webmaster" in their logfiles as the authenticated
> username as the spammers have chosen this to look slightly
> inconspicuous.


2004-03-27 03:24:51 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)

2004-03-27 03:24:53 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)

2004-03-27 03:24:54 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)

2004-03-27 03:24:57 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)

2004-03-27 03:24:58 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)

2004-03-27 03:24:59 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)

2004-03-27 03:25:00 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)

2004-03-27 03:25:01 login_mysql authenticator failed for (microsof-9dlveu)
[219.153.153.244]:1791: 535 Incorrect authentication data (set_id=webmaster)

Farkin spammers..

- -jwb