[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <5540771A.4050005@msapiro.net>
Date: Tue, 28 Apr 2015 23:15:54 -0700
From: Mark Sapiro <mark@...piro.net>
To: Kurt Seifried <kseifried@...hat.com>, mailman-security@...hon.org,
"oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
Subject: Re: Limited DoS in mailman (requires non standard config)
On 04/28/2015 10:32 PM, Kurt Seifried wrote:
> CentOS 6.6 with mailman-2.1.12-18.el6.x86_64
>
> Which is.. ergh. I did not realize how old this is.
Email address validation was strengthened in Mailman 2.1.15. Prior to
that, it would allow a slash (/) in an email address domain but not since.
--
Mark Sapiro <mark@...piro.net> The highway is for gamblers,
San Francisco Bay Area, California better use your sense - B. Dylan
Download attachment "signature.asc" of type "application/pgp-signature" (182 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
