Majordomo Detection

The remote host hosts Majordomo, a web-based mailing list management application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid51999; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2011-0049

Directory traversal vulnerability in the listfileget function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. dot dot sequences in the help command, as demonstrated using 1 a crafted email and 2 cgi-bin/mjwwwusr in the web interface...

Directory traversal

Directory traversal vulnerability in the listfileget function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. dot dot sequences in the help command, as demonstrated using 1 a crafted email and 2 cgi-bin/mjwwwusr in the web interface...

DSquare Exploit Pack: D2SEC_MAJORDOMO

Name| d2secmajordomo ---|--- CVE| CVE-2011-0049 Exploit Pack| D2ExploitPack Description| d2secmajordomo Notes|...

CVE-2011-0049

Majordomo 2 contains a directory traversal vulnerability in the _list_file_get() function (lib/Majordomo.pm) that can be triggered via the help command over email or the web interface, allowing remote, unauthenticated attackers to read arbitrary files (e.g., /etc/passwd). Affected versions are Ma...

CVE-2011-0049

Directory traversal vulnerability in the listfileget function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. dot dot sequences in the help command, as demonstrated using 1 a crafted email and 2 cgi-bin/mjwwwusr in the web interface...

Majordomo 2 _list_file_get() directory traversal vulnerability

Overview Majordomo 2 contains a directory traversal vulnerability in the listfilegetfunction, which may allow a remote, unauthenticated attacker to obtain sensitive information. Description Majordomo 2 contains a directory traversal vulnerability in the listfilegetfunction lib/Majordomo.pm caused...

Majordomo Vulnerable to Directory Traversal

US-CERT is aware of a vulnerability affecting Majordomo 2. Exploitation of this vulnerability may allow an attacker to obtain sensitive information that could be used to leverage additional attacks. Reports indicate that this vulnerability affects builds 20110121 and prior. US-CERT encourages use...

PT-2011-2045 · Great Circle Associates · Majordomo

Name of the Vulnerable Software and Affected Versions: Majordomo versions prior to 20110131 Description: The issue allows remote attackers to read arbitrary files via .. dot dot sequences in the help command. This can be achieved by sending a crafted email or by exploiting the web interface,...

CVE-2010-0345

Cross-site scripting XSS vulnerability in the Majordomo extension 1.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Majordomo extension 1.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-0345

The CVE-2010-0345 entry concerns a Cross-site scripting (XSS) vulnerability in the Majordomo extension (version 1.1.3 and earlier) for TYPO3. The affected component is the Majordomo extension within TYPO3, with an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via un...

CVE-2010-0345

Cross-site scripting XSS vulnerability in the Majordomo extension 1.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2003-1367

The vulnerable software is Majordomo (2.0 through 1.94.4, possibly earlier). The which_access variable defaults to open, enabling remote attackers to enumerate mailing-list member addresses using the which command. The provided sources confirm the underlying issue but do not specify a vendor patc...

CVE-2003-1367

The whichaccess variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command...

CVE-2003-1367

The whichaccess variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command...

majordomo_leakage.txt

------------------------------------------------------------------------------- Title : Majordomo info leakage all versions Date : 03/02/2003 Article by : Marco van Berkum [email protected] Bug finder : Jakub Klausa [email protected] Investigated by : Jakub Klausa and Marco van Berkum...

majordomo.1.94.4.txt

Hi, I found something to discuss, this time involving majordomo. This was tested on a Slackware linux 8.0 kernel 2.4.8; majordomo version 1.94.4, I also tested the other versions and all default installs had the same problem, note that the versions 1.94.1 an 1.94.2 should NOT be used anymore, tho...

CVE-1999-1220

CVE-1999-1220 affects Majordomo 1.94.3 and earlier. The vulnerability lies in the advertise/noadvertise directives in a configuration file, where shell metacharacters in the Reply-To header can allow a remote attacker to execute arbitrary commands. According to the provided description, exploitat...

CVE-1999-1220

Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header...