View Single Post
  #2   (View Single Post)  
Old 3rd February 2011
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 7,984
Default

Clarification: This is for Majordomo 2, an "upwardly compatible rewrite" of the original Majordomo ... and does not apply to the original Majordomo.

The original is what is in the OpenBSD ports tree (mail/majordomo). It had a patch just yesterday, but entirely unrelated. The patch was for a regression caused by Perl 5.12.

I just tested this vulnerability with the original Majordomo, in a 17 day old -current. No response from the example exploit string via Email.
Reply With Quote