[TYPO3-commerce] Fwd: [TYPO3-announce] [Ticket#2011051110000011] Security issue in third party TYPO3 extension "powermail"

[Ingo Schmitt]

Hi Frank, Roman und Sebastian,

das ist doch mal ein schöner Fall wo wir direkt den Caretaker testen können. Prüft Ihr bitte welche TYPO3 Installationen von uns betroffen sind und macht bitte eine Liste der Installationen die zu bearbeiten sind.

@Sebastian: Kannst Du bitte eine Abschätzung machen, wieviel Aufwand das ist pro Installation?

Danke

ingo

Anfang der weitergeleiteten E-Mail:

> Von: TYPO3 Security Team <security at typo3.org>
> Datum: 11. Mai 2011 09:01:26 MESZ
> An: typo3-announce at lists.typo3.org
> Betreff: [TYPO3-announce] [Ticket#2011051110000011] Security issue in third party TYPO3 extension "powermail"
> Antwort an: "TYPO3 Announcement List, readonly" <typo3-announce at lists.typo3.org>
> 
> Dear TYPO3 users,
> 
> A security vulnerability has been found in the following third party TYPO3
> extension:
> "powermail" (powermail)
> 
> For further information on the issue in extension "powermail"
> (powermail),
> please read the related advisory TYPO3-SA-2011-004 that was published today:
> http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-004/
> 
> In general the TYPO3 Security Team recommends to read the following pages:
> 
> The TYPO3 Security Cookbook:
> http://typo3.org/fileadmin/security-team/typo3_security_cookbook_v-0.5.pdf
> 
> Make sure you are subscribed to the TYPO3 Announce List:
> http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce
> 
> See all TYPO3 security advisories:
> http://typo3.org/teams/security/security-bulletins/
> 
> 
> 
> Regards,
> 
> Marcus Krause
> Member of the TYPO3 Security Team
> 
> --
> TYPO3 Security Team homepage: http://typo3.org/teams/security/
> 
> E-Mail: security at typo3.org
> 
> Please note: When replying to this e-mail, please leave the header intact.
> _______________________________________________
> TYPO3-announce mailing list
> TYPO3-announce at lists.typo3.org
> http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce
> 
> 


Mit freundlichen Gruessen
Ingo Schmitt

*** BITTE BEACHTEN SIE UNSERE NEUE ANSCHRIFT! ***

-- 
Marketing Factory Consulting GmbH  *   mailto:is at marketing-factory.de
Marienstrasse 14                   *          Tel.: +49 211-361176-63
D-40212 Duesseldorf, Germany       *          Fax:  +49 211-361176-99
Amtsgericht Duesseldorf HRB 53971  * http://www.marketing-factory.de/

Geschaeftsfuehrer:    Peter Faisst   |   Katja Faisst
Karoline Steinfatt   |   Christoph Allefeld   |   Markus M. Kimmel