PT-2001-2274 · Gnu · Mailman

Publicado 2001-09-05 · Atualizado 2017-10-10 · CVE-2001-1132

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mailman versions 2.0.x through 2.0.5

Description The issue allows remote attackers to gain access to list administrative pages when there is an empty site or list password. This occurs because the empty password is not properly handled during the call to the crypt function during authentication.

Recommendations For Mailman versions 2.0.x through 2.0.5, update to version 2.0.6 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2001-1132

Produtos afetados

Mailman

Referências · 5

• http://osvdb.org/5455 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1132 · Nota
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000420 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7091 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1132 · Nota de Segurança