CVE-2005-0080

The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address.
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:ubuntu:ubuntu_linux:4.10:*:*:*:*:*:*:*

History

20 Nov 2024, 23:54

Type Values Removed Values Added
References () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285839 - () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285839 -
References () http://marc.info/?l=bugtraq&m=110549296126351&w=2 - () http://marc.info/?l=bugtraq&m=110549296126351&w=2 -
References () http://qa.debian.org/bts-security.html - () http://qa.debian.org/bts-security.html -

Information

Published : 2005-05-02 04:00

Updated : 2024-11-20 23:54


NVD link : CVE-2005-0080

Mitre link : CVE-2005-0080

CVE.ORG link : CVE-2005-0080


JSON object : View

Products Affected

gnu

  • mailman

ubuntu

  • ubuntu_linux