The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address.
References
Configurations
History
20 Nov 2024, 23:54
Type | Values Removed | Values Added |
---|---|---|
References | () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285839 - | |
References | () http://marc.info/?l=bugtraq&m=110549296126351&w=2 - | |
References | () http://qa.debian.org/bts-security.html - |
Information
Published : 2005-05-02 04:00
Updated : 2024-11-20 23:54
NVD link : CVE-2005-0080
Mitre link : CVE-2005-0080
CVE.ORG link : CVE-2005-0080
JSON object : View
Products Affected
gnu
- mailman
ubuntu
- ubuntu_linux
CWE