RE: [Nms-cgi-devel] Formmail insecurities

[Paul R. <pa...@ro...>]

I'd be interested in taking a stab at fixing the insecurities noted in this
advisory -- this is certainly an area where doing a better job can have a
tremendous impact.

Objections?

-paul


-----Original Message-----
From: nms...@li...
[mailto:nms...@li...]On Behalf Of Jeremy
Howard
Sent: Saturday, January 26, 2002 10:23 PM
To: nms...@li...
Subject: [Nms-cgi-devel] Formmail insecurities


I don't know if you folks have seen this advisory:
  http://www.monkeys.com/anti-spam/formmail-advisory.pdf

I've contacted the author and he claims that many of the listed
vunerabilities are also present in the current NMS version of this script. I
checked whether he had informed you and he told me that he hasn't, and that
he doesn't plan to. I don't have any more details--I just figured I'd pass
on this info...



_______________________________________________
Nms-cgi-devel mailing list
Nms...@li...
https://lists.sourceforge.net/lists/listinfo/nms-cgi-devel