PT-2001-2274 · Gnu · Mailman

Published 2001-09-05 · Updated 2017-10-10 · CVE-2001-1132

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mailman versions 2.0.x through 2.0.5

Description The issue allows remote attackers to gain access to list administrative pages when there is an empty site or list password. This occurs because the empty password is not properly handled during the call to the crypt function during authentication.

Recommendations For Mailman versions 2.0.x through 2.0.5, update to version 2.0.6 or later to resolve the issue.

Fix

Related Identifiers

CVE-2001-1132

Affected Products

Mailman

References · 5

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000420 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1132 · Security Note
• http://osvdb.org/5455 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1132 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7091 · Note