PT-2002-1446 · Gnu+2 · Mailman+2

Published 2002-06-18 · Updated 2016-12-28 · CVE-2002-0389

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mailman (affected versions not specified)

Description The issue concerns the storage of private mail messages by Pipermail in Mailman. These messages are stored with predictable filenames in a world-executable directory. This setup allows local users to read private mailing list archives.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CESA-2015_1417

CVE-2002-0389

RHSA-2015:1417

RHSA-2015_1417

Affected Products

Centos

Mailman

Red Hat

References · 18

• http://rhn.redhat.com/errata/RHSA-2015-1417.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0389 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2775 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0389 · Security Note
• https://linux.oracle.com/errata/ELSA-2015-1417.html · Vendor Advisory
• https://lists.centos.org/pipermail/centos-cr-announce/2015-July/028282.html · Note
• https://access.redhat.com/errata/RHSA-2015:1417 · Note
• http://marc.info/?l=bugtraq&m=101902003314968&w=2 · Note
• https://lists.centos.org/pipermail/centos-cr-announce/2015-July/014902.html · Note
• https://access.redhat.com/security/cve/CVE-2002-0389 · Note
• https://rhn.redhat.com/errata/RHSA-2015-1417.html · Note
• http://securityfocus.com/bid/4538 · Note
• http://sourceforge.net/tracker/?func=detail&atid=100103&aid=474616&group_id=103 · Note
• https://mail.python.org/pipermail/mailman-developers/2015-March/024875.html · Note
• https://lists.centos.org/pipermail/centos-cr-announce/2015-July/021592.html · Note