from my knowledge of playing around with php and mail();, it almost sounds like someone is trieing to send an email from your server with a php script (X-Mailer: PHP^M)
the log looks like a plain old email header and the name looks like SPAM ~myuu On Mon, 2002-07-29 at 04:50, Jon wrote: > Hello, > > I have started to receive this in my log files warning of ... > > Jul 27 18:33:32 www sendmail[31045]: g6RHXWv31045: POSSIBLE ATTACK from [UNKNOWN]: >newline in string "From Sapphire Natural Beauty > Website^M X-Sender: <[EMAIL PROTECTED]>^M X-Mailer: PHP^M X-Priority: 3^M >Return-Path: <[EMAIL PROTECTED]>^M " > > Can someone help explain this? > > Thanks > > Ja > > > _______________________________________________ > cobalt-security mailing list > [EMAIL PROTECTED] > http://list.cobalt.com/mailman/listinfo/cobalt-security >
signature.asc
Description: This is a digitally signed message part
