Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown

CVE-2003-1367

Disclosure Date: December 31, 2003 (last updated February 22, 2025)
The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command.
0
0
Attacker Value
Unknown

CVE-2000-0037

Disclosure Date: December 28, 1999 (last updated February 22, 2025)
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
0
0
Attacker Value
Unknown

CVE-2000-0035

Disclosure Date: December 28, 1999 (last updated February 22, 2025)
resend command in Majordomo allows local users to gain privileges via shell metacharacters.
0
0
Attacker Value
Unknown

CVE-1999-1220

Disclosure Date: August 24, 1997 (last updated February 22, 2025)
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header.
0
0
Attacker Value
Unknown

CVE-1999-0957

Disclosure Date: June 18, 1997 (last updated February 22, 2025)
MajorCool mj_key_cache program allows local users to modify files via a symlink attack.
0
0
Attacker Value
Unknown

CVE-1999-0207

Disclosure Date: June 09, 1994 (last updated February 22, 2025)
Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
0
0