PT-2000-1784 · Gnu · Mailman

Published 2000-11-14 · Updated 2017-10-10 · CVE-2000-0861

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mailman version 1.1

Description The issue allows list administrators to execute arbitrary commands via shell metacharacters in the listname macro expansion.

Recommendations For Mailman version 1.1, consider restricting the use of the %(listname) macro expansion until a patch is available to prevent arbitrary command execution.

Exploit

Fix

Related Identifiers

CVE-2000-0861

Affected Products

Mailman

References · 6

• 🔥 http://securityfocus.com/bid/1667 · Exploit
• http://archives.neohapsis.com/archives/freebsd/2000-09/0112.html · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2000-09/0040.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0861 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5493 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0861 · Note