[Mailman-Users] security heads up - path traversal with 2.1.5

[iane at sussex.ac.uk]

--On February 14, 2005 07:40:29 -0800 Chuq Von Rospach 
<chuqui at plaidworks.com> wrote:

> Again.
>
> So excuse me if I'm grumpy. I think I'm entitled. Not as much as Barry
> is, but he's far too polite to try to get people to behave. that's my job
> around here.
>

Good on you. I was mightily pissed off when that exploit was posted. I kept 
my mouth shut because I didn't know whether the poster was in error, or 
whether he was trying to force the developers to pay attention. Now I know 
he was in error.


-- 
Ian Eiloart
Servers Team
Sussex University ITS