[2085] in bugtraq
Simple CGI email handler, fixed
daemon@ATHENA.MIT.EDU (Tom)
Sat Aug 5 17:41:49 1995
Date: Sat, 5 Aug 1995 13:35:51 GMT
Reply-To: Bugtraq List <BUGTRAQ@CRIMELAB.COM>
From: Tom <boutell@boutell.com>
X-To: bugtraq@CRIMELAB.COM
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@CRIMELAB.COM>
There is a new version (2.1) available at the URL
http://siva.cshl.org/email/index.html that does not have
the security problem discussed here (tilde escapes). The problem
went unfixed because it doesn't happen under SunOS, as those who
attempted to demonstrate it to me presumably found out. Apologies
for not having fixed it sooner.
-T
