EUVD-2021-0099

Malware in sbrugna...

Mailman Crated Email Remote User Password Disclosure

The target is running a version of the Mailman mailing list software that allows a list subscriber to retrieve the mailman password of any other subscriber by means of a specially crafted mail message to the server. That is, a message sent to $listname-request@$target containing the lines :...