Comment 0 for bug 1780874

Revision history for this message
Mark Sapiro (msapiro) wrote :

A URL with a very long text listname such as

http://www.example.com/mailman/listinfo/This_is_a_long_string_with_some_phishing_text

will echo the text in the "No such list" error response. This can be used to make a potential victim think the phishing text comes from a trusted site.