CVE-1999-0207
HighExploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
A remote attacker can execute commands through Majordomo using the Reply-To field and a 'lists' command.
Risk Assessment
An attacker may gain access to administrative functions of Majordomo, potentially leading to unauthorized management of mailing lists.
Recommendation
It is recommended to restrict access to Majordomo and monitor the use of the Reply-To field in messages.
Other vulnerabilities in Majordomo
See all- CVE-2000-0037Medium
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
- CVE-2000-0035Medium
The resend command in Majordomo allows local users to gain privileges via shell metacharacters.
- CVE-1999-1220High
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header.
Original NVD description (English source)
Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.