Send Mail Security problem

Hi, I have a avps with lycos and I am new to all this linux stuff. Anyway in my webmin control panel I was looking around and I noticed that I had messages in my sendmail message queue. Out of curiosity I clicked on one of them and it was addressed to
PHP Code:
bob www lycos-vds com 
and it was undeliverable. The message was coming from
PHP Code:
NULL@NULL21378277272 c00m 
It had an attached message so I went in to read the message which was trying to be sent and it contained every bit of information about my server, in this list of information it had a reference to a site I run using Irater software, in this list it displays the login url and admin password. So my admin password is trying to be sent to other people.

The list of server information is in a php style output: a screenshot is attached:



There are also other undelivered emails in the queue all to people at
PHP Code:
lycos-vds com 
So what is doing this, I am afraid that people may be getting sent my admin password for this site.

I have other sites which are not listed so does this mean that this site has a vulrenability and someone is exploiting it?

Any help would be appreciated, thanks,

Ryan

 

 

 

 

Top