CVE Vulnerabilities

CVE-2003-1367

Published: Dec 31, 2003 | Modified: Jul 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:C/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to open by default, which allows remote attackers to identify the email addresses of members of mailing lists via a which command.

Affected Software

Name Vendor Start Version End Version
Majordomo Great_circle_associates * 2.0
Majordomo Great_circle_associates 1.94.4 1.94.4
Majordomo Great_circle_associates 1.94.5 1.94.5

References