smartlist: wrong input processing
| Package(s): | smartlist | CVE #(s): | CAN-2005-0157 | ||||
| Created: | May 3, 2005 | Updated: | May 3, 2005 | ||||
| Description: | Jeroen van Wolffelaar noticed that the confirm add-on of SmartList, the listmanager used on lists.debian.org, which is used on that host as well, could be tricked to subscribe arbitrary addresses to the lists. | ||||||
| Alerts: |
| ||||||