[Mailman-Users] Large Security Problem

Irwan Hadi irwanhadi at phxby.com
Fri Jul 20 16:17:04 CEST 2001


On Fri, Jul 20, 2001 at 04:47:44AM -0600, SuperDuG wrote:

> Hello,
> 
> I'm running Mailman 2.0.5 and the main problem I have is in the web based
> area of the Mailman software ...
> 
> Logins are needed Me at myemail.com address ... but you can enter anything you
> want for a password and WHAMO ... you're in
> 
> This also works for the administration menu ... you can enter whatever you
> want so long as you enter at least 1 character ... and WHAMO you're in ...
> 
> This just seemed to me as a LARGE problem and I would like any help as to
> how to fix it.

On which platform ? BSD ? Linux ? Solaris ?
I'm running on BSD 4.3 Release, and it seems okay.




More information about the Mailman-Users mailing list