CVE-1999-1220
HighExploitation Probability (EPSS)
High risk79th percentile - higher than 79% of all known CVEs
Summary
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header.
Risk Assessment
Attackers can exploit this vulnerability to gain control over the system, potentially leading to serious data security breaches.
Recommendation
It is recommended to update Majordomo to the latest version and review the configuration to minimize the risk of this vulnerability being exploited.
Other vulnerabilities in Majordomo
See all- CVE-1999-0207High
A remote attacker can execute commands through Majordomo using the Reply-To field and a 'lists' command.
- CVE-2000-0037Medium
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
- CVE-2000-0035Medium
The resend command in Majordomo allows local users to gain privileges via shell metacharacters.
Original NVD description (English source)
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header.