Home page logo

bugtraq logo Bugtraq mailing list archives

Re: Intel.com Mailing List Arbitrary Address Removal Link
From: Thierry Zoller <support () sniff-em com>
Date: Wed, 6 Feb 2002 21:17:40 +0000 (GMT Standard Time)

While Intel requires you to login to modify account information, it does not 
require you to login to remove your e-mail (or any e-mail) from its mailing 
list database.

This issue is valuable for plenty of mailing lists, as example take the GRC mailing list :

Exemple :
(POST) therefor no direct link here. Enter whatever e-mail address and select "delete membership".
As for moderation, I thought specific vulnerabilities (i.e intel.com is vulnerable to etc) wouldn't be posted.

Thierry Zoller

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]