CVE-2003-1367

Published: Dec 31, 2003Modified: Apr 16, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command.

Affected (3)

Products: Great Circle Associates: Majordomo

Great Circle Associates

1 product

Majordomo

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Great Circle Associates Majordomo	Up to 2.0
Great Circle Associates Majordomo	Version 1.94.4
Great Circle Associates Majordomo	Version 1.94.5

Related CWEs

CWE-16

References (8)

http://securityreason.com/securityalert/3235

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/310113

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/6761

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/11243

Source: cve@mitre.org

http://securityreason.com/securityalert/3235

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/310113

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/6761

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/11243

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.