CVE-2000-0701: Medium severity gnu mailman vulnerability
Published Sep 21, 2000
·Updated
The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges.
Affected Software
7 affected components
GNU Mailman=2.0-beta3
Conectiva Linux=4.2
Conectiva Linux=4.1
GNU Mailman=2.0-beta4
Conectiva Linux=5.1
Conectiva Linux=5.0
redhat Linux
Remediation
Patch Available
Patch Available
Event History
Sep 21, 2000
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0701?
CVE-2000-0701 has a moderate severity rating due to its potential to allow local users to gain elevated privileges.
2
How do I fix CVE-2000-0701?
To fix CVE-2000-0701, update to a patched version of Mailman that properly sanitizes format strings.
3
Which versions are affected by CVE-2000-0701?
CVE-2000-0701 affects Mailman 2.0beta3 and 2.0beta4, along with certain versions of Conectiva Linux and Red Hat Linux.
4
Who is impacted by CVE-2000-0701?
Local users on systems running vulnerable versions of Mailman may be impacted by CVE-2000-0701.
5
What type of vulnerability is CVE-2000-0701?
CVE-2000-0701 is a format string vulnerability that can be exploited to elevate user privileges.