EUVD-2000-0848

Malware in sbrugna...

EUVD-2001-0290

Malware in sbrugna...

CVE-2001-0290

Mailman 2.0.1 and earlier contain a vulnerability that allows list administrators to obtain user passwords. The available sources confirm the affected product/version and the impact on confidentiality, but do not provide the underlying root cause specifics or a remediation fix/version. No exploit...

CVE-2000-0861

CVE-2000-0861 affects Mailman 1.1. The vulnerability allows a list administrator to execute arbitrary commands by injecting shell metacharacters into the %(listname) macro expansion. The root cause is improper handling of the macro expansion, enabling command execution with LOCAL attack vector an...

Mailman 1.1 + external archiver vulnerability

SUMMARY Mailman from www.list.org is a mailing list manager with strong Web functionality. If a site is running Mailman 1.1 with an external archiving mechanism that uses the internal variable listnames, list administrators can run any command with the Webserver's uid/gid. A patch is available at...