Re: [SLUG] Re: slug Digest, Vol 29, Issue 5

[Daniel Pittman <daniel@xxxxxxxxxxxx>]

david.lyon@xxxxxxxxxxx writes:
> Quoting Daniel Pittman <daniel@xxxxxxxxxxxx>:
>
>> Which release of SME Server was this?  Having done some auditing, and
>> worked with customers who ran SME Server systems for some years without
>> incident -- but only on older versions -- I am surprised at this claim.
>
> It is some years ago now...
>
> As I recall the older versions didn't seem to have the problem. I only
> found the problem with the 'last two' versions... whatever numbers
> they were.. sorry can't remember.

No worries.

>> Do you have any supporting evidence for that?  Alternately, did the
>> folks you know write this up anywhere?
>
> We weren't able to track down the exact process that was doing the
> sending...  Every time you touched the mouse.. or keyed 'ps ax' the
> sending seemed to stop.
>
> When it was spamming, we got disconnection threats from our isp...
>
> I'm very certain that if one were to install it fresh from CD on a
> fresh machine it would start spamming again. The rogue code (I think)
> would still be there.

Well, I certainly never observed that, and would be surprised if there
had been rogue code along those lines in there -- even after the product
ended up mostly unmaintained in the hands of the community.

Regards,
        Daniel