Detections
Analytics
CVE-2003-1367
critical
Description
The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command.
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/11243