freebsd-ports/mail/ecartis/files/patch-CAN-2004-0913
Simon L. B. Nielsen 52d918f707 Fix a security vulnerabiliy which allows an attacker in the same
domain as the list admin to gain administrator privileges and alter
list settings.

VuXML:		http://vuxml.FreeBSD.org/be543d74-539a-11d9-a9e7-0001020eed82.html
Obtained from:	Debian
Approved by:	portmgr (krion), maintainer timeout
2005-01-01 19:21:47 +00:00

12 lines
317 B
Text

--- modules/lsg2/lsg2-main.c.orig
+++ modules/lsg2/lsg2-main.c
@@ -180,6 +180,9 @@
struct listserver_cgi_mode *curmode;
char *tbuf;
+ /* turn off loose host matching */
+ LMAPI->set_var("no-loose-domain-match", "yes", VAR_GLOBAL);
+
/* Generic header */
if (LMAPI->get_bool("lsg2-iis-support"))