Great Circle Associates Majordomo — known CVE vulnerabilities

Every CVE whose affected-product data names Great Circle Associates Majordomo, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2003-1367 — CVSS 7.8 (high): The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote…
• CVE-1999-0207 — CVSS 7.5 (high): Remote attacker can execute commands through Majordomo using the Reply-To field and a "lists" command.
• CVE-1999-1220 — CVSS 7.5 (high): Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a…
• CVE-2000-0035 — CVSS 4.6 (medium): resend command in Majordomo allows local users to gain privileges via shell metacharacters.
• CVE-2000-0037 — CVSS 4.6 (medium): Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.