CVE-2001-1132

Published: Sep 5, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt function during authentication.

Affected (1)

Products: Gnu: Mailman

Gnu

1 product

Mailman

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Mailman	Up to 2.0.5

References (6)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000420

Source: cve@mitre.org

http://www.osvdb.org/5455

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/7091

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000420

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/5455

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/7091

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.