#513 security flaw in subscribe/unsubscribe

0.980
closed
Jamie Cameron
5
2002-06-11
2002-06-10
Anonymous
No

when subscribing or unsubscribing someone on a majordomo list
using the webmin module, the list password is e-mailed to the
person being subscribed or unsubscribed. this is a security
problem.

Discussion

  • Jamie Cameron
    Jamie Cameron
    2002-06-11

    • status: open --> closed
     
  • Jamie Cameron
    Jamie Cameron
    2002-06-11

    Logged In: YES
    user_id=129364

    That only happens if no list owner email address has been set.
    You can set it in the 'Subscription and moderation' section.