CVE-2001-1132: High severity GNU Mailman vulnerability
Published Sep 5, 2001
·Updated
Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt function during authentication.
Affected Software
1 affected component
GNU Mailman<=2.0.5
Event History
Sep 5, 2001
CVE Published
04:00 AM
Jun 25, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1132?
CVE-2001-1132 has a moderate severity level as it allows unauthorized access to list administrative pages.
2
How do I fix CVE-2001-1132?
To fix CVE-2001-1132, upgrade Mailman to version 2.0.6 or later.
3
What versions of Mailman are affected by CVE-2001-1132?
Mailman versions 2.0.x before 2.0.6 are vulnerable to CVE-2001-1132.
4
What type of attacks does CVE-2001-1132 exploit?
CVE-2001-1132 is exploited through remote attacks by utilizing an empty site or list password.
5
What is the main issue with authentication in CVE-2001-1132?
CVE-2001-1132's main issue lies in the improper handling of the crypt function during authentication.