CVE-2001-1132 describes a critical vulnerability in Mailman 2.0.x versions prior to 2.0.6, where remote attackers could bypass authentication to access list administration pages. This flaw arises from improper handling of empty site or list passwords during the crypt function call. With a CVSS score of 7.5 (HIGH), this vulnerability allows for full compromise of confidentiality, integrity, and availability (C:P/I:P/A:P) via a low-complexity network attack requiring no authentication. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, with 10 mentions indicating notable attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.0.5CPE matchmatch criteria | cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.