CVE-2003-1367

N/A

Descripcion

The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado12/31/2003

Ultima modificacion4/16/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

great_circle_associates:majordomo

Debilidades (CWE)

CWE-16

Referencias

http://securityreason.com/securityalert/3235(cve@mitre.org)

http://www.securityfocus.com/archive/1/310113(cve@mitre.org)

http://www.securityfocus.com/bid/6761(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/11243(cve@mitre.org)

http://securityreason.com/securityalert/3235(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/310113(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/6761(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/11243(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.