Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-0207. PoCs published by Razvan Dragomirescu.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in Majordomo versions prior to 1.91 by crafting a malicious email header in the 'Reply-to' field. The payload executes arbitrary commands via shell metacharacters, leading to remote code execution (RCE) with the privileges of the Majordomo process.
Description
Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
Exploits (1)
This exploit leverages a command injection vulnerability in Majordomo versions prior to 1.91 by crafting a malicious email header in the 'Reply-to' field. The payload executes arbitrary commands via shell metacharacters, leading to remote code execution (RCE) with the privileges of the Majordomo process.