{"id":6423989,"date":"2015-08-12T03:09:45","date_gmt":"2015-08-12T03:09:45","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/spam-attack-vulnerability\/"},"modified":"2016-08-30T16:43:34","modified_gmt":"2016-08-30T16:43:34","slug":"spam-attack-vulnerability","status":"closed","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/spam-attack-vulnerability\/","title":{"rendered":"Spam Attack Vulnerability"},"content":{"rendered":"<p>Hi.  I&#8217;ve been running subscribe2 for several years.  Last week spammers were able to use the executable to spew 25,000 junk mails from our server using the exim mail utility.  Here is an entry from the \/var\/log\/exim_mainlog:<\/p>\n<p>2015-08-06 07:41:00 cwd=\/home\/gowhn\/public_html\/blog-subdir\/wp-content\/plugins\/subscribe2 4 args: \/usr\/sbin\/sendmail -t -i -fsnamechanged@me.com<br \/>\n2015-08-06 07:41:00 1ZNLPo-0002rw-6Q &lt;= NameAlsoChanged@me.com U=gowhn P=local S=1415 id=c01e8363ee09ecf26a3e8bdd097a7bff@domainchanged.com T=&#8221;Re:Adorable blonde strips spreads&#8221; from &lt;AlsoNameChanged@me.com&gt; for AnotherNameChanged@yahoo.com<\/p>\n<p>Please evaluate the security vulnerability by assuring that it is wordpress that is calling the script, or preventing the script from activation from the mail via naked SMTP with a cmd= parameter.<\/p>\n<p>Presentation of the arguments to the script enabled the script to run, and then stuffed my mail server with messages at the whim of the calling program.  All the hacker had to do was &#8220;guess&#8221; the directory where subscribe2 was installed.  Subscribe2 was disabled at the time the exploit occurred.<\/p>\n<p>https:\/\/wordpress.org\/plugins\/subscribe2\/<\/p>\n","protected":false},"template":"","class_list":["post-6423989","topic","type-topic","status-closed","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/6423989","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/6423989\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=6423989"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}