Re: VERY CRITICAL: Security Patch for mj_wwwusr

"Jason L Tibbitts III" <[email protected]> Fri, 04 Feb 2011 17:12:26 -0600

Newsgroups	gmane.mail.majordomo.majordomo2.devel
Message-ID	<[email protected]>

>>>>> "MGF" == Marc G Fournier <[email protected]> writes:

MGF> Someone just pointed out to me that something like:
MGF> mj_wwwusr?passw=&list=GLOBAL&user=&func=help&extra=/../../../../../../../../etc/rc.conf
MGF> Will allow you to read files from the file system

I fixed this in CVS not long ago.

 - J<