Lucene search
HistoryFeb 04, 2000 - 5:00 a.m.
CVE-1999-0850
cve-1999-0850
endymion mailman
permission issues
email security
local users
3.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The default permissions for Endymion MailMan allow local users to read email or modify files.
Affected configurations
Node
endymionmailman_webmailMatch3.0.18
| CPE | Name | Operator | Version |
|---|---|---|---|
| endymion:mailman_webmail | endymion mailman webmail | eq | 3.0.18 |
References
3.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-1999-0850