PT-2021-5365 · Unknown+4 · Gnu Mailman+4

Mark Sapiro + 1 · Published 2021-11-12 · Updated 2022-12-09 · CVE-2021-43332

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GNU Mailman versions prior to 2.1.36

Description The issue is related to insufficient restriction of authentication attempts in GNU Mailman, allowing a remote attacker to bypass authentication by guessing the administrator's password using a brute-force method. Specifically, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password, which could potentially be cracked by a moderator via an offline brute-force attack.

Recommendations For GNU Mailman versions prior to 2.1.36, update to version 2.1.36 or later to resolve the issue. As a temporary workaround, consider restricting access to the Cgi/admindb.py admindb page to minimize the risk of exploitation. Additionally, restrict the use of the encrypted admin password in the CSRF token until the issue is resolved.

Fix

Insufficiently Protected Credentials

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-522

CWE-307

Related Identifiers

ALT-PU-2021-3272

ALT-PU-2021-3273

ALT-PU-2021-3277

ALT-PU-2021-3299

BDU:2021-06195

CVE-2021-43332

DLA-3049-1

OESA-2021-1444

OESA-2022-1931

SUSE-SU-2022:1886-1

USN-5151-1

USN-5151-2

Affected Products

Alt Linux

Gnu Mailman

Linuxmint

Suse

Ubuntu

References · 38

• https://osv.dev/vulnerability/USN-5151-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44227 · Security Note
• https://osv.dev/vulnerability/OESA-2022-1931 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1886-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43332 · Security Note
• https://osv.dev/vulnerability/DLA-3049-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-43332 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-43331 · Security Note
• https://bugs.launchpad.net/mailman/+bug/1949403 · Patch
• https://ubuntu.com/security/notices/USN-5151-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43332 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43331 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-06195 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-43332 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-43332 · Vendor Advisory