Re: Intel.com Mailing List Arbitrary Address Removal Link

From: Thierry Zoller (support@sniff-em.com)
Date: Wed Feb 06 2002 - 13:17:40 PST

  • Next message: Mark Ng: "Long Path Exploit on NTFS"

    >While Intel requires you to login to modify account information, it does not 
    >require you to login to remove your e-mail (or any e-mail) from its mailing 
    >list database.
    
    This issue is valuable for plenty of mailing lists, as example take the GRC mailing list :
    
    Exemple :
    http://grc.com/mail.htm
    (POST) therefor no direct link here. Enter whatever e-mail address and select "delete membership".
    As for moderation, I thought specific vulnerabilities (i.e intel.com is vulnerable to etc) wouldn't be posted.
    
    == 
    Thierry Zoller
    http://www.sniff-em.com
    



    This archive was generated by hypermail 2b30 : Thu Feb 07 2002 - 22:18:57 PST