[Mailman-Developers] bugtraq submission warning: email address harvesting exploit

[Doug Selph]

On Tuesday, Nov 25, 2003, at 11:46 US/Central, Bernhard Kuemel wrote:

> If you think the problem is worth fixing please estimate how long it 
> will take and I will wait a reasonable time for a fix before I post 
> the problem and the exploit code to bugtraq. Otherwise I will post to 
> bugtraq in about 1 week.
>
> Here is the exploit code:

It seems, Bernard, that you may as well have posted it to bugtraq 
immediately, since your posting of the code to this list will likely 
make the exploit code accessible via a google search for "mailman 
exploit" within a matter of hours...