[Mailman-Developers] [Mailman-Users] any info on this reported exploit?

[Tokio Kikuchi]

Tokio Kikuchi wrote:

>> http://www.securityfocus.com/bid/16248/discuss
>> GNU Mailman Large Date Data Denial Of Service Vulnerability
>> GNU Mailman is prone to a denial of service attack. This issue affects 
>> the
>> email date parsing functionality of Mailman.
(snip)
>> 06.3.18 CVE: CVE-2005-4153
(snip)
> 
> Mailman-2.1.7 is not vulnerable to this issue.
> 

We may have to patch against this email package parsedate bug.
I've just uploaded a patch on SF tracker.  Please someone review this 
before I commit in the CVS (this weekend, maybe).
https://sourceforge.net/tracker/?func=add&group_id=103&atid=300103

Cheers,
-- 
Tokio Kikuchi, tkikuchi@ is.kochi-u.ac.jp
http://weather.is.kochi-u.ac.jp/