FreeBSD-SA-00:28.majordomo

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:28 Security Advisory FreeBSD, Inc. Topic: majordomo is not safe to run on multi-user machines Category: ports Module: majordomo Announced: 2000-07-05 Affects: Ports...

[SECURITY] Majordomo will be removed

Package : majordomo Problem type : local exploit Debian-specific: no The majordomo package as shipped in the non-free section accompanying Debian GNU/Linux 2.1/slink allows any local user to trick majordomo into executing arbitrary code or to create or write files as the majordomo user anywhere o...

[SECURITY] Majordomo will be removed

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman June 3, 2000 - ------------------------------------------------------------------------ Package : majordomo Problem type : local...

majordomo.txt

Hi, Majordomo is a perl script for managing mailing lists. The package comes with several scripts and a program written in C wrapper that runs setuid to ensure that majordomo performs all the work with proper permissions for further information you can check the FAQ that comes with the package...

CVE-2000-0037

Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file...

CVE-2000-0037

Technical details for CVE-2000-0037 are not publicly provided in the connected documents; only the high-level description is available. Monitor for updates.

CVE-2000-0035

resend command in Majordomo allows local users to gain privileges via shell metacharacters...

CVE-2000-0035

CVE-2000-0035 : The vulnerability involves Majordomo’s resend command that allows local users to gain privileges via shell metacharacters. This is a local-privilege issue with the root cause being unsafely handled shell metacharacters in the resend logic. The NVD entry lists a CVSSv2 base score o...

majordomo.local.txt

---------- Forwarded message ---------- Date: 28 Dec 99 20:47:44 CST From: Brock Tellier Subject: majordomo local exploit OVERVIEW A vulnerability in majordomo allows local users to gain elevated privileges. BACKGROUND I've only tested the version of majordomo which comes with UnixWare 7.1 which ...

Majordomo 1.94.4/1.94.5 - Local -C Parameter (1)

source: https://www.securityfocus.com/bid/903/info It is possible for a local user to gain majordomo privileges through a vulnerability which allows privileged arbitrary commands to be executed. If the -C parameter is passed to majordomo or one of several other scripts when run with the setuid ro...

Majordomo 1.94.41.94.5 - Local -C Parameter (2)

Majordomo 1.94.41.94.5 - Local -C Parameter 2 // source: https://www.securityfocus.com/bid/903/info It is possible for a local user to gain majordomo privileges through a vulnerability which allows privileged arbitrary commands to be executed. If the -C parameter is passed to majordomo or one of...

Majordomo 1.94.41.94.5 - Local -C Parameter (1)

Majordomo 1.94.41.94.5 - Local -C Parameter 1 source: https://www.securityfocus.com/bid/903/info It is possible for a local user to gain majordomo privileges through a vulnerability which allows privileged arbitrary commands to be executed. If the -C parameter is passed to majordomo or one of...

Majordomo 1.94.4/1.94.5 - Local -C Parameter (2)

// source: https://www.securityfocus.com/bid/903/info It is possible for a local user to gain majordomo privileges through a vulnerability which allows privileged arbitrary commands to be executed. If the -C parameter is passed to majordomo or one of several other scripts when run with the setuid...

CVE-2000-0037

Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file...

CVE-2000-0035

resend command in Majordomo allows local users to gain privileges via shell metacharacters...

Great Circle Associates Majordomo 1.94.4 - Local resend

Great Circle Associates Majordomo 1.94.4 - Local resend source: https://www.securityfocus.com/bid/902/info It is possible to execute arbitrary commands with elevated privileges through exploiting the majordomo binary, "resend". A setuid root wrapper program calls resend after setuiding and...

Great Circle Associates Majordomo 1.94.4 - Local resend

source: https://www.securityfocus.com/bid/902/info It is possible to execute arbitrary commands with elevated privileges through exploiting the majordomo binary, "resend". A setuid root wrapper program calls resend after setuiding and setgiding to lowered but still elevated privileges which it ru...

CVE-1999-0207

Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command...

CVE-1999-0207

CVE-1999-0207 affects Majordomo. A remote attacker can execute commands by exploiting the Reply-To field and a "lists" command. Multiple connected sources corroborate access vector and impact, consistently describing command execution guidance through Majordomo’s mailing-list handling. The root c...

CVE-1999-1220

Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header...