Vulnerabilities > CVE-2003-1367 - Configuration vulnerability in Great Circle Associates Majordomo 1.94.4/1.94.5
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |
Common Weakness Enumeration (CWE)
References
- http://securityreason.com/securityalert/3235
- http://securityreason.com/securityalert/3235
- http://www.securityfocus.com/archive/1/310113
- http://www.securityfocus.com/archive/1/310113
- http://www.securityfocus.com/bid/6761
- http://www.securityfocus.com/bid/6761
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11243
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11243