On possible cause in an exploit in a very popular form processing CGI-Script called FormMail. Any Web server using a version older then 1.9 is open for SPAMmers to use the server via the processing script. It's been going on for a couple of months, but more servers are now getting hit since the word has spread. The easiest fix is either to remove the program or simply update it:

http://www.worldwidemart.com/scripts/formmail.shtml

Later...

Alan


At 12:01 PM 1/5/2002 -0500, you wrote:

--__--__--

Message: 2
Date: Fri, 04 Jan 2002 22:02:53 -0600
From: Laura Gurak <gurakl@umn.edu>
To: AIR List <air-l@aoir.org>
Subject: [Air-l] increase in spam...
Reply-To: air-l@aoir.org

Has anyone else noticed a sudden increase in the amount of porn-type spam
they are getting? At least six people, including one journalist, have been
asking me what's up. I've heard from both academics and folks in the private
sector, and all seem to indicate a sudden (past 5-7 days) rise in this
stuff. I personally have noticed it as well. Anyone know what's going on?