Am I correct in assuming the attack only allows hackers to access (read)
files? Yes, I understand that if they can read/get mailman passwords, they
can obviously change lists but nothing more nefarious than that? ie not
change OS files or mailman sw? And would it be presumptuous of me to think this means only users mailman passwords but not mailman sitepassword can be
compromised as the latter is stored encrypted, right? (Ok, they could brute-force the encryption) Same true of list moderator passwords?




 =-=-=-=-=-=-=-=-=-=-  generated by /dev/dave -=-=-=-=-=-=-=-=-=-=-=-=
 David Stern                                    University of Maryland
           Institute for Advanced Computer Studies
------------------------------------------------------
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Reply via email to