1497 matches found
CVE-2001-1132
Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt function during authentication...
CVE-2001-0021
MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternatetemplate parameter...
CVE-2001-0021
MailMan Webmail 3.0.25 and earlier is affected by an arbitrary command execution vulnerability in mmstdod.cgi. Input to the ALTERNATE_TEMPLATES/alternate_template parameters is not properly sanitized, allowing a remote attacker to execute arbitrary commands. The issue is documented in CVE-2001-00...
CVE-2001-0290
Mailman 2.0.1 and earlier contain a vulnerability that allows list administrators to obtain user passwords. The available sources confirm the affected product/version and the impact on confidentiality, but do not provide the underlying root cause specifics or a remediation fix/version. No exploit...
CVE-2001-0290
Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords...
CVE-2001-0290
Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords...
[Mailman-Announce] ANNOUNCE Mailman 2.0.2 (important privacy patch)
I've just uploaded the Mailman 2.0.2 release to SourceForge. This is a bug fix release that also fixes a potential privacy hole, which could allow a list administrator to get access to user passwords. Even with those passwords, I believe there's little additional harm that a list admin could do,...
Дырка в mailman (user passwords access)
Администратор списков может получить доступ к паролям пользователям...
CVE-2001-0021
MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternatetemplate parameter...
CVE-2000-0861
CVE-2000-0861 affects Mailman 1.1. The vulnerability allows a list administrator to execute arbitrary commands by injecting shell metacharacters into the %(listname) macro expansion. The root cause is improper handling of the macro expansion, enabling command execution with LOCAL attack vector an...
CVE-2000-0861
Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %listname macro expansion...
Дырка в mailman
Ошибка форматной строки в wrapper позволяет получить привилегии группы mailman. Кроме того, файл содержащий пароли пользователей открыт на чтение...
Дырки в mailman webmail
Классические дырки perl CGI при работе с файлами...
(SRADV00005) Remote command execution vulnerabilities in MailMan Webmail
================================================= Secure Reality Pty Ltd. Security Advisory 5 SRADV00005 http://www.securereality.com.au ================================================= Title Remote command execution vulnerabilities in MailMan Webmail Released 6/11/2000 Vulnerable All 3.x versio...
Дырка в mailman
Недостаточная проверка ввода пользователя на наличие shell-символов дает возможность администраторам списков выполнять команды на сервере...
SRADV00005.txt
================================================= Secure Reality Pty Ltd. Security Advisory 5 SRADV00005 http://www.securereality.com.au ================================================= Title Remote command execution vulnerabilities in MailMan Webmail Released 6/11/2000 Vulnerable All 3.x versio...
Endymion MailMan 3.0.x - Arbitrary Command Execution
Endymion MailMan 3.0.x - Arbitrary Command Execution source: https://www.securityfocus.com/bid/2063/info A vulnerability exists in 3.x versions of Endymion MailMan Webmail prior to release 3.0.26. The widely-used Perl script provides a web-email interface. Affected versions make insecure use of t...
Endymion MailMan 3.0.x - Arbitrary Command Execution
source: https://www.securityfocus.com/bid/2063/info A vulnerability exists in 3.x versions of Endymion MailMan Webmail prior to release 3.0.26. The widely-used Perl script provides a web-email interface. Affected versions make insecure use of the perl open function. Attackers can control the way...
MailMan Webmail mmstdod.cgi Arbitrary Command Execution
The version of MailMan Webmail on the remote web server has an arbitrary command execution vulnerability. Input to the 'ALTERNATETEMPLATES' parameter of mmstdod.cgi is not properly sanitized. A remote attacker could exploit this to execute arbitrary commands on the system. %NASLMINLEVEL 70300 C...