PT-2002-1446 · Gnu+2 · Mailman+2

Publicado 2002-06-18 · Atualizado 2016-12-28 · CVE-2002-0389

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mailman (affected versions not specified)

Description The issue concerns the storage of private mail messages by Pipermail in Mailman. These messages are stored with predictable filenames in a world-executable directory. This setup allows local users to read private mailing list archives.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CESA-2015_1417

CVE-2002-0389

RHSA-2015:1417

RHSA-2015_1417

Produtos afetados

Centos

Mailman

Red Hat

Referências · 18

• https://lists.centos.org/pipermail/centos-cr-announce/2015-July/028282.html · Nota
• https://access.redhat.com/errata/RHSA-2015:1417 · Nota
• http://rhn.redhat.com/errata/RHSA-2015-1417.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=101902003314968&w=2 · Nota
• https://lists.centos.org/pipermail/centos-cr-announce/2015-July/014902.html · Nota
• https://access.redhat.com/security/cve/CVE-2002-0389 · Nota
• https://rhn.redhat.com/errata/RHSA-2015-1417.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0389 · Nota de Segurança
• http://securityfocus.com/bid/4538 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2775 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0389 · Nota de Segurança
• http://sourceforge.net/tracker/?func=detail&atid=100103&aid=474616&group_id=103 · Nota
• https://mail.python.org/pipermail/mailman-developers/2015-March/024875.html · Nota
• https://linux.oracle.com/errata/ELSA-2015-1417.html · Aviso do Fabricante
• https://lists.centos.org/pipermail/centos-cr-announce/2015-July/021592.html · Nota