summaryrefslogtreecommitdiff
path: root/informationals/teso-i0019.txt
diff options
context:
space:
mode:
Diffstat (limited to 'informationals/teso-i0019.txt')
-rw-r--r--informationals/teso-i0019.txt34
1 files changed, 34 insertions, 0 deletions
diff --git a/informationals/teso-i0019.txt b/informationals/teso-i0019.txt
new file mode 100644
index 0000000..9ce06b9
--- /dev/null
+++ b/informationals/teso-i0019.txt
@@ -0,0 +1,34 @@
10019 2000/03/21 Majordomo include inconveniences
2
3==== TESO Informational =======================================================
4This piece of information is to be kept confidential.
5===============================================================================
6
7Description ..........: Majordomo include inconveniences
8Date .................: 2000/03/21 19:26
9Author ...............: typo
10Publicity level ......: well known
11Affected .............: Mailing Lists
12Type of entity .......: implementation
13Type of discovery ....: useful information
14Severity/Importance ..: medium
15Found by .............: everyone?
16
17Information ===================================================================
18
19Most people that use Majordomo with the rules imposed by the resend script
20use another, supposed to be secret, MTA include for the real outgoing mails
21instead of a dedicated bulk mailer.
22
23But if you know the name of the real include you can simply bypass all
24rules that resend enforces.
25
26Lets take a reallife example and look at some headers:
27
28Received: (from majordomo@localhost) by kxxxxxxaxxe.org (8.9.3/8.9.3)
29id QAA21181 for linuxde-outgoing; Tue, 21 Mar 2000 16:30:36 +0100
30
31the real name is linuxde-outgoing.. mails sent there can be of
32arbitary size, and bypass moderation, headers, footers, banned words,...
33
34===============================================================================