Great Circle Associates List-Managers
(March 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Security Problems
From: Brian Behlendorf <brian @ hyperreal . com>
Date: Tue, 14 Mar 1995 13:26:49 -0800 (PST)
To: Eric Klien <oceania @ enet . net>
Cc: list-managers @ GreatCircle . COM
In-reply-to: <199503141802.LAA05738@pinyon.enet.net>

On Tue, 14 Mar 1995, Eric Klien wrote:
> I am working on changing the code of majordomo by hand to solve some 
> major security problems with it.  The problems that I have are that 
> 1) anyone can post to the list by sending e-mail to list-l-outgoing 
> and 2) anyone can get a copy of the list by sending majordomo telnet 
> client 25, expn listname-outgoing even if I disable the who command 
> in majordomo.  
> 
> Can anyone give suggestions on solving the above problems?

Yes, rename the outgoing alias to something other than list-outgoing.  

	Brian



Follow-Ups:
References:
Indexed By Date Previous: Re: Proposed Trouble Data Base
From: Brian Behlendorf <brian@hyperreal.com>
Next: Correct list
From: Eric Klien <oceania@enet.net>
Indexed By Thread Previous: Re: Security Problems
From: mcb@postmodern.com (Michael C. Berch)
Next: Re: Security Problems
From: Alan Thew <Alan.Thew@liverbird.liverpool.ac.uk>

Google
 
Search Internet Search www.greatcircle.com