CVE-1999-0742

Technical details such as affected versions, exploit vectors, or patches are not provided in the connected documents. The description notes weak authentication in Debian Mailman, so monitor for updates and official advisories.

CVE-1999-0850

The default permissions for Endymion MailMan allow local users to read email or modify files...

[SECURITY] New versions of mailman fixes cookie attack

We have become aware that the version mailman as supplied in Debian GNU/Linux 2.1 has a problem with verifying list administrators. The problem is that the cookie value generation used was predictable, so using forged authentication cookies it was possible to access the list administration webpag...

[SECURITY] New versions of mailman fixes cookie attack

We have become aware that the version mailman as supplied in Debian GNU/Linux 2.1 has a problem with verifying list administrators. The problem is that the cookie value generation used was predictable, so using forged authentication cookies it was possible to access the list administration webpag...

CVE-1999-0742

The Debian mailman package uses weak authentication, which allows attackers to gain privileges...