CVE-2004-0412

Mailman < 2.1.5 - Unauthenticated User Password Disclosure via Crafted Email Request

Title source: llm
STIX 2.1

Description

Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.

References (9)

Core 9
Core References
Various Sources vendor-advisory x_refsource_mandrake
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:051
Various Sources mailing-list x_refsource_mlist
http://mail.python.org/pipermail/mailman-announce/2004-May/000072.html
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/10412
Vendor Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200406-04.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/11701
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16256
Mailing List vendor-advisory x_refsource_fedora
http://marc.info/?l=bugtraq&m=109034869927955&w=2
Vendor Advisory vendor-advisory x_refsource_conectiva
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842

Scores

EPSS 0.0373
EPSS Percentile 88.1%

Details

Status published
Products (7)
gnu/mailman 2.1
gnu/mailman 2.1.1
gnu/mailman 2.1.2
gnu/mailman 2.1.3
gnu/mailman 2.1.4
gnu/mailman 2.1b1
pypi/mailman 0 - 2.1.5PyPI
Published Aug 18, 2004
Tracked Since Feb 18, 2026