CVE

Id
2277  
CVE No.
CVE-2000-0701  
Status
Candidate  
Description
The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges.  
Phase
Modified (20040818)  
Votes
ACCEPT(3) Baker, Cole, Levy | MODIFY(1) Frech | NOOP(1) Wall  
Comments
Frech> XF:gnu-mailman-format-string | You can perhaps normalize Bugtraq URL to CONFIRM:http://www.securityfocus.com/archive/1/73355.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
8205 2277 CVE-2000-0701 BUGTRAQ:20000801 Advisory: mailman local compromise  View
8206 2277 CVE-2000-0701 URL:http://www.securityfocus.com/archive/1/73220  View
8207 2277 CVE-2000-0701 CONFIRM:http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000802105050.A11733@rak.isternet.sk  View
8208 2277 CVE-2000-0701 BUGTRAQ:20000802 CONECTIVA LINUX SECURITY ANNOUNCEMENT - mailman  View
8209 2277 CVE-2000-0701 URL:http://archives.neohapsis.com/archives/bugtraq/2000-07/0474.html  View
8210 2277 CVE-2000-0701 BUGTRAQ:20000802 MDKSA-2000:030 - Linux-Mandrake not affected by mailman problem  View
8211 2277 CVE-2000-0701 URL:http://archives.neohapsis.com/archives/bugtraq/2000-07/0479.html  View
8212 2277 CVE-2000-0701 REDHAT:RHSA-2000:030  View
8213 2277 CVE-2000-0701 URL:http://www.redhat.com/support/errata/RHSA-2000-030.html  View
8214 2277 CVE-2000-0701 BID:1539  View

Related JVN