PT-2000-1784 · Gnu · Mailman

Publicado 2000-11-14 · Atualizado 2017-10-10 · CVE-2000-0861

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mailman version 1.1

Description The issue allows list administrators to execute arbitrary commands via shell metacharacters in the listname macro expansion.

Recommendations For Mailman version 1.1, consider restricting the use of the %(listname) macro expansion until a patch is available to prevent arbitrary command execution.

Exploit

Correção

Identificadores relacionados

CVE-2000-0861

Produtos afetados

Mailman

Referências · 6

• 🔥 http://securityfocus.com/bid/1667 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5493 · Nota
• http://archives.neohapsis.com/archives/freebsd/2000-09/0112.html · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2000-09/0040.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0861 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0861 · Nota de Segurança