CVE-2000-0037
MediumExploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
Risk Assessment
Local users may gain unauthorized access to the system, potentially leading to serious security breaches.
Recommendation
It is recommended to restrict access to configuration files and monitor user privileges.
Other vulnerabilities in Majordomo
See all- CVE-1999-0207High
A remote attacker can execute commands through Majordomo using the Reply-To field and a 'lists' command.
- CVE-2000-0035Medium
The resend command in Majordomo allows local users to gain privileges via shell metacharacters.
- CVE-1999-1220High
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header.
Original NVD description (English source)
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS