Vulnerabilities

TI-2002-00403 CVE-2002-0418 · GHSA-v5gw-6wv6-2mj2

Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet…

LOW 27

Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02197 Published 2002-06-11 No fix listed

TI-2002-00402 CVE-2002-0417 · GHSA-qjvc-3w5m-f5pj

Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers…

LOW 27

Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02165 Published 2002-06-11 No fix listed

TI-2001-00021 CVE-2001-0021 · GHSA-cj3q-54vp-7x82

MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands…

MEDIUM 58

MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.13461 Published 2001-05-07 No fix listed

TI-1999-00800 CVE-1999-0850 · GHSA-wwpg-62fj-46fr

The default permissions for Endymion MailMan allow local users to read email or modify files.

LOW 17

The default permissions for Endymion MailMan allow local users to read email or modify files.

CVSS 2.0LOW 3.6 Local No auth Interaction — EPSS 0.00324 Published 2000-02-04 No fix listed

Vulnerabilities

Filters

Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet…

Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers…

MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands…

The default permissions for Endymion MailMan allow local users to read email or modify files.