mailman -- password disclosure

2004-05-15T00:00:00
ID AD9D2518-3471-4737-B60B-9A1F51023B28
Type freebsd
Reporter FreeBSD
Modified 2004-05-15T00:00:00

Description

Barry Warsaw reports:

Today I am releasing Mailman 2.1.5, a bug fix release [...] This version also contains a fix for an exploit that could allow 3rd parties to retrieve member passwords. It is thus highly recommended that all existing sites upgrade to the latest version.