[Mailman-Developers] Doubt about security

Edilson Azevedo eazevedo at bsd.com.br
Mon Jan 5 14:04:33 CET 2009


Hi Developers! I've a question:

 Why in all lists sites that I look, the "Admin Links" is open? Worst: Why
(inside the Admin Links) the link "create a new mailing list" is open?
Anyone in anywhere can to try until discover the Admin password??

 My doubt is: Why those links are open to world? I think that it's very
insecure, or not?!?


Thanks folks!!!

-- 

Edilson Azevedo
Mail / Gtalk: eazevedo at bsd.com.br


More information about the Mailman-Developers mailing list