The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2003-1357 | The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-08T02:28:02.849Z
Reserved: 2007-10-16T00:00:00
Link: CVE-2003-1367
No data.
Status : Deferred
Published: 2003-12-31T05:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2003-1367
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD