CVE-2004-1143

4 documents4 sources
Severity
7.5HIGH
EPSS
0.9%
top 24.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Mailman
Timeline
PublishedDec 31
Latest updateApr 29

Description

The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDgnu/mailman22 versions+21

Patches

Patch: bugs.debian.org ↗Patch: bugs.debian.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-7j4m-3jpc-cww6: The password generation in mailman before 2↗2022-04-29
▶
CVEList
CVE-2004-1143: The password generation in mailman before 2↗2005-01-19
▶

💬Community

1
Bugzilla
CVE-2004-1143 password generation flaw↗2005-01-05
▶