CVE-2000-0035
MediumExploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
The resend command in Majordomo allows local users to gain privileges via shell metacharacters.
Risk Assessment
Local users can exploit this vulnerability to escalate privileges, potentially leading to unauthorized access to the system.
Recommendation
It is recommended to restrict access to the resend command and review and update the Majordomo configuration to minimize risk.
Other vulnerabilities in Majordomo
See all- CVE-1999-0207High
A remote attacker can execute commands through Majordomo using the Reply-To field and a 'lists' command.
- CVE-2000-0037Medium
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
- CVE-1999-1220High
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header.
Original NVD description (English source)
resend command in Majordomo allows local users to gain privileges via shell metacharacters.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS