On Sun, 29 Apr 2001 20:00:56 +0200, Dennis <[log in to unmask]> wrote:

>CETEFL-L.REVIEWS = ALL OWNER(CETEFL-L)
>CETEFL-L.ESSAY = ALL OWNER(CETEFL-L)
>CETEFL-L.ACT =ALL OWNER(CETEFL-L)
>CETEFL-L.DIS = ALL OWNER(CETEFL-L)
>CETEFL-L.CHAT = ALL (OWNER CETEFL-L)    <- this one is incorrect syntax
>CETEFL-L.NEWBIES =ALL OWNER(CETEFL-L)
>================================================
>
>I then attempted to put a CETEFL-L.ESSAY file  and received the
>following message from the server:
>
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>This server does not have any file by the name "cetefl-l.essay".
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

For security reasons, the file must exist in physical form on the server before
LISTSERV will accept a PUT command for the file.  This can be a full copy of the
file (placed there by FTP or other OS means outside of LISTSERV) or merely a
'stub' file (one line place-holder, placed there by FTP, or other OS means
outside of LISTSERV).

This prevents LISTSERV from being hacked and used to exploit the server.  Even
if LISTSERV were hacked, nothing very useful can be done (arbitrary files cannot
be created, arbitrary code cannot be run, etc.).