from my knowledge of playing around with php and mail();, it almost sounds like someone is trieing to send an email from your server with a php script (X-Mailer: PHP^M) the log looks like a plain old email header and the name looks like SPAM ~myuu On Mon, 2002-07-29 at 04:50, Jon wrote: > Hello, > > I have started to receive this in my log files warning of ... > > Jul 27 18:33:32 www sendmail[31045]: g6RHXWv31045: POSSIBLE ATTACK from [UNKNOWN]: newline in string "From Sapphire Natural Beauty > Website^M X-Sender: <jo@xxxxxxxxxxxxxxxxxx>^M X-Mailer: PHP^M X-Priority: 3^M Return-Path: <jo@xxxxxxxxxxxxxxxxxx>^M " > > Can someone help explain this? > > Thanks > > Ja > > > _______________________________________________ > cobalt-security mailing list > cobalt-security@xxxxxxxxxxxxxxx > http://list.cobalt.com/mailman/listinfo/cobalt-security >
Attachment:
signature.asc
Description: This is a digitally signed message part