oss-sec mailing list archives

Re: Limited DoS in mailman (requires non standard config)


From: Mark Sapiro <mark () msapiro net>
Date: Tue, 28 Apr 2015 23:15:54 -0700

On 04/28/2015 10:32 PM, Kurt Seifried wrote:
CentOS 6.6 with mailman-2.1.12-18.el6.x86_64

Which is.. ergh. I did not realize how old this is.


Email address validation was strengthened in Mailman 2.1.15. Prior to
that, it would allow a slash (/) in an email address domain but not since.

-- 
Mark Sapiro <mark () msapiro net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

Attachment: signature.asc
Description: OpenPGP digital signature


Current thread: