CVE-2001-0290

Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords...

Дырка в mailman (user passwords access)

Администратор списков может получить доступ к паролям пользователям...

Дырка в mailman

Ошибка форматной строки в wrapper позволяет получить привилегии группы mailman. Кроме того, файл содержащий пароли пользователей открыт на чтение...

Дырка в mailman

Недостаточная проверка ввода пользователя на наличие shell-символов дает возможность администраторам списков выполнять команды на сервере...

CVE-2000-0701

The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges...

CVE-2000-0701

The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges...

Mailman 1.1 + external archiver vulnerability

SUMMARY Mailman from www.list.org is a mailing list manager with strong Web functionality. If a site is running Mailman 1.1 with an external archiving mechanism that uses the internal variable listnames, list administrators can run any command with the Webserver's uid/gid. A patch is available at...

[Security] Mailman exploitability

Attachment: pgph2MPti2iCN.pgp Description: PGP message...

[Security] Mailman exploitability

Attachment: pgpQWRTbVHFRI.pgp Description: PGP message...

[SECURITY] New versions of mailman fixes cookie attack

We have become aware that the version mailman as supplied in Debian GNU/Linux 2.1 has a problem with verifying list administrators. The problem is that the cookie value generation used was predictable, so using forged authentication cookies it was possible to access the list administration webpag...