Vulnerabilities

TI-2003-01267 CVE-2003-1367 · GHSA-fqg8-8594-3gf8

The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier…

LOW 37

The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "whi…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0155 Published 2007-10-17 No fix listed CWE-16

TI-1999-01168 CVE-1999-1220 · GHSA-95g2-fv7p-pc5j

Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when…

LOW 37

Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02052 Published 2001-09-12 No fix listed

TI-1999-00907 CVE-1999-0957 · GHSA-j8wr-3p25-cjqp

MajorCool mj_key_cache program allows local users to modify files via a symlink attack.

LOW 11

MajorCool mj_key_cache program allows local users to modify files via a symlink attack.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00356 Published 2000-04-25 No fix listed

TI-2000-00037 CVE-2000-0037 · GHSA-58v6-mw8v-65hc

Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.

LOW 22

Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00679 Published 2000-03-22 No fix listed

TI-2000-00035 CVE-2000-0035 · GHSA-4wrx-2682-w227

resend command in Majordomo allows local users to gain privileges via shell metacharacters.

LOW 22

resend command in Majordomo allows local users to gain privileges via shell metacharacters.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00594 Published 2000-02-04 No fix listed

TI-1999-00204 CVE-1999-0207 · GHSA-8wvf-8q62-fx6g

Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.

MEDIUM 44

Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.08717 Published 1999-09-29 No fix listed

Vulnerabilities

Filters

The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier…

Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when…

MajorCool mj_key_cache program allows local users to modify files via a symlink attack.

Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.

resend command in Majordomo allows local users to gain privileges via shell metacharacters.

Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.