1572 matches found
[Security] Mailman exploitability
re.Match object; span=1731, 2749, match=!--X-Head-of-Message--\nul\nliemTo/em:...
Advisory: mailman local compromise
Author : Stan Bubrouski Date : August 1, 2000 Package : mailman Versions affected : 2.0beta3 released: 2000-Jun-28 23:25 2.0beta4 released: 2000-Jul-06 21:27 Severity : access to group mailman binaries are installed as which usually mailman. Most directories in a mailman install are mode 2755 as...
CVE-1999-0850
CVE-1999-0850 affects Endymion MailMan. The vulnerability arises from default permissions that let local users read email or modify files, implying local access and partial confidentiality/integrity impact. The provided documents do not specify a patch, workaround, affected versions, or exploit d...
CVE-1999-0850
The default permissions for Endymion MailMan allow local users to read email or modify files...
CVE-1999-0850: Undefined Security Weakness
The default permissions for Endymion MailMan allow local users to read email or modify files...
CVE-1999-0742
The Debian mailman package uses weak authentication, which allows attackers to gain privileges...
CVE-1999-0742
Technical details such as affected versions, exploit vectors, or patches are not provided in the connected documents. The description notes weak authentication in Debian Mailman, so monitor for updates and official advisories.
CVE-1999-0742: Undefined Security Weakness
The Debian mailman package uses weak authentication, which allows attackers to gain privileges...
CVE-1999-0850
The default permissions for Endymion MailMan allow local users to read email or modify files...
[SECURITY] New versions of mailman fixes cookie attack
We have become aware that the version mailman as supplied in Debian GNU/Linux 2.1 has a problem with verifying list administrators. The problem is that the cookie value generation used was predictable, so using forged authentication cookies it was possible to access the list administration webpag...
[SECURITY] New versions of mailman fixes cookie attack
We have become aware that the version mailman as supplied in Debian GNU/Linux 2.1 has a problem with verifying list administrators. The problem is that the cookie value generation used was predictable, so using forged authentication cookies it was possible to access the list administration webpag...