PT-2005-1189 · Gnu+1 · Mailman+1

Juha-Matti Tapio · Published 2005-01-19 · Updated 2016-10-18 · CVE-2005-0080

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions mailman version 2.1.5

Description The issue allows remote attackers to determine the list membership for a given e-mail address by exploiting a difference in error messages displayed by the 55 options traceback.dpatch patch in Ubuntu 4.10, depending on whether the e-mail address is subscribed to a private list.

Recommendations For mailman version 2.1.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-0080

Affected Products

Ubuntu

Mailman

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-0080 · Security Note
• http://qa.debian.org/bts-security.html · Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285839 · Note
• http://marc.info/?l=bugtraq&m=110549296126351&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0080 · Note