From owner-cvs-all  Sat Nov 24 16: 3:39 2001
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 9485137B419; Sat, 24 Nov 2001 16:03:35 -0800 (PST)
Received: (from sobomax@localhost)
	by freefall.freebsd.org (8.11.4/8.11.4) id fAP03ZQ19248;
	Sat, 24 Nov 2001 16:03:35 -0800 (PST)
	(envelope-from sobomax)
Message-Id: <200111250003.fAP03ZQ19248@freefall.freebsd.org>
From: Maxim Sobolev <sobomax@FreeBSD.org>
Date: Sat, 24 Nov 2001 16:03:35 -0800 (PST)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: projects/mfcns/handler MFCns_handler.py
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

sobomax     2001/11/24 16:03:35 PST

  Modified files:
    mfcns/handler        MFCns_handler.py 
  Log:
  Be more strict about what's allowed as a mail address to which notification
  is to be sent. Particularly, disallow any of the shell meta-characters,
  because this address is then passed to a system(3)-like routite, which
  potentially may be eploited to execute arbitrary commands on a system at
  which service is running.
  
  Revision  Changes    Path
  1.11      +6 -0      projects/mfcns/handler/MFCns_handler.py

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message