Lucene search

K
freebsdFreeBSDAD9D2518-3471-4737-B60B-9A1F51023B28
HistoryMay 15, 2004 - 12:00 a.m.

mailman -- password disclosure

2004-05-1500:00:00
vuxml.freebsd.org
14

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

77.5%

Barry Warsaw reports:

Today I am releasing Mailman 2.1.5, a bug fix release
[…] This version also contains a fix for an exploit that
could allow 3rd parties to retrieve member passwords. It is
thus highly recommended that all existing sites upgrade to
the latest version.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmailman< 2.1.5UNKNOWN
FreeBSDanynoarchja-mailman< 2.1.5UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

77.5%