Vulnerability Details CVE-2003-0991
Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service (crash) via malformed e-mail commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 80.7%
CVSS Severity
CVSS v2 Score 5.0
References
- ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842
- http://mail.python.org/pipermail/mailman-announce/2004-February/000067.html
- http://www.debian.org/security/2004/dsa-436
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:013
- http://www.redhat.com/support/errata/RHSA-2004-019.html
- http://www.securityfocus.com/bid/9620
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15106
- ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842
- http://mail.python.org/pipermail/mailman-announce/2004-February/000067.html
- http://www.debian.org/security/2004/dsa-436
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:013
- http://www.redhat.com/support/errata/RHSA-2004-019.html
- http://www.securityfocus.com/bid/9620
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15106
Products affected by CVE-2003-0991
-
cpe:2.3:a:gnu:mailman:1.0
-
cpe:2.3:a:gnu:mailman:1.1
-
cpe:2.3:a:gnu:mailman:2.0
-
cpe:2.3:a:gnu:mailman:2.0.1
-
cpe:2.3:a:gnu:mailman:2.0.10
-
cpe:2.3:a:gnu:mailman:2.0.11
-
cpe:2.3:a:gnu:mailman:2.0.12
-
cpe:2.3:a:gnu:mailman:2.0.13
-
cpe:2.3:a:gnu:mailman:2.0.2
-
cpe:2.3:a:gnu:mailman:2.0.3
-
cpe:2.3:a:gnu:mailman:2.0.4
-
cpe:2.3:a:gnu:mailman:2.0.5
-
cpe:2.3:a:gnu:mailman:2.0.6
-
cpe:2.3:a:gnu:mailman:2.0.7
-
cpe:2.3:a:gnu:mailman:2.0.8
-
cpe:2.3:a:gnu:mailman:2.0.9
-
cpe:2.3:a:gnu:mailman:2.1
-
cpe:2.3:a:sgi:propack:2.3