CVE-2004-0412

CVE-2004-0412 describes a vulnerability in GNU Mailman versions prior to 2.1.5, where a remote attacker could obtain user passwords by sending a specially crafted email request to the Mailman server. This vulnerability has a CVSS score of 5.0, indicating a medium severity, with a low attack complexity and no authentication required, leading to a potential compromise of confidentiality. While there is no known active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the CVE has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.