Bugtraq mailing list archives

Re: Intel.com Mailing List Arbitrary Address Removal Link


From: Thierry Zoller <support () sniff-em com>
Date: Wed, 6 Feb 2002 21:17:40 +0000 (GMT Standard Time)

While Intel requires you to login to modify account information, it does not 
require you to login to remove your e-mail (or any e-mail) from its mailing 
list database.

This issue is valuable for plenty of mailing lists, as example take the GRC mailing list :

Exemple :
http://grc.com/mail.htm
(POST) therefor no direct link here. Enter whatever e-mail address and select "delete membership".
As for moderation, I thought specific vulnerabilities (i.e intel.com is vulnerable to etc) wouldn't be posted.

== 
Thierry Zoller
http://www.sniff-em.com


Current thread: