On page 270 of the SpamCop FAQ there is a broken link to a PDF regarding the formmail vulnerability advisory.

http://www.spamcop.net/fom-serve/cache/270.html

The original PDF seems to be missing on the monkeys.com site, however, they still have information about it at this location:
http://www.monkeys.com/formmailer/about.html

They also have a formmail vulnerability tester here: http://www.monkeys.com/formmailer/ftest1a.html

Finally, an original copy of the PDF from monkeys.com can be found here:
http://www.city-fan.org/ftp/contrib/websrv...il-advisory.pdf

I would think the best thing to do is to save a local copy of the PDF on the SpamCop servers since the file is only 52kb.

Thanks for posting this updated information.
Unfortunately, you are looking at one of the "official" web pages that we are unable to do anything about.
We will forward the request to fix it, but they seem to be very slow in responding.
We will create new pages within the Wiki
Thank you again for bringing it to our attention.

PS Wazoo, could you forward the request to TPTB as you have far better success than anyone else, even though it is quite limited.

Edit: link to new Wiki page http://forum.spamcop.net/scwik/FormMail

Just to add onto my original comment, the vulnerability in the original Formmail scri_pt was corrected by the author in a April 2002 release of Formmail v1.91 and NMS has a modified version that is regularly updated and has more features and security function.

E-mail sent, pointers to 'here' with the explanation ....
Thanks for not only noting the problem but doing the research and providing possible solutions .....

nms is the only one that rings a bell for me ....

I see that someone already hit the single-page-access-expanded version of the SpamCop FAQ here .. thanks for that work also ....

Thanks. I've updated the pdf link to the new one (at least for now). I will not put the tester link in the FAQ because it involves exploiting the known vulnerability on outside servers. Ironport/SpamCop does not support the abuse of any server for any reason.

Richard