CVE-2021-34337
published 2023-04-15CVE-2021-34337: An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured…
PriorityP335medium6.3CVSS 3.1
AVLACHPRLUINSUCHIHAN
EPSS
0.30%
21.8th percentile
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrary REST API calls. The REST API is bound to localhost by default, limiting the ability for attackers to exploit this, but can optionally be made to listen on other interfaces.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mailman3 | < mailman3 3.3.7-1 (bookworm) | mailman3 3.3.7-1 (bookworm) |
| gnu | mailman | < 3.3.5 | 3.3.5 |
| gnu | mailman | >= 0 < 3.3.5 | 3.3.5 |
CVSS provenance
nvdv3.16.3MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
osv6.3MEDIUM
vendor_debian6.3MEDIUM
vendor_redhat6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Mailman Core vulnerable to timing attacks
ghsa·2023-04-15
CVE-2021-34337 [HIGH] CWE-208 Mailman Core vulnerable to timing attacks
Mailman Core vulnerable to timing attacks
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrary REST API calls. The REST API is bound to localhost by default, limiting the ability for attackers to exploit this, but can optionally be made to listen on other interfaces.
OSV
Mailman Core vulnerable to timing attacks
osv·2023-04-15
CVE-2021-34337 [HIGH] Mailman Core vulnerable to timing attacks
Mailman Core vulnerable to timing attacks
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrary REST API calls. The REST API is bound to localhost by default, limiting the ability for attackers to exploit this, but can optionally be made to listen on other interfaces.
OSV
CVE-2021-34337: An issue was discovered in Mailman Core before 3
osv·2023-04-15·CVSS 6.3
CVE-2021-34337 [MEDIUM] CVE-2021-34337: An issue was discovered in Mailman Core before 3
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrary REST API calls. The REST API is bound to localhost by default, limiting the ability for attackers to exploit this, but can optionally be made to listen on other interfaces.
Red Hat
mailman: password checking timing attack in administrative REST API
vendor_redhat·2021-12-04·CVSS 6.3
CVE-2021-34337 [MEDIUM] CWE-287 mailman: password checking timing attack in administrative REST API
mailman: password checking timing attack in administrative REST API
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrary REST API calls. The REST API is bound to localhost by default, limiting the ability for attackers to exploit this, but can optionally be made to listen on other interfaces.
A timing attack was found in the mailman administrative REST API due to the usage of a simple string comparison function when checking the password. This flaw allows an attacker who can talk to the REST API to discover the admin password due to timing leaks.
Statement: This issue did not affect the versions of mailman as shipped with Red Hat Enterprise
Debian
CVE-2021-34337: mailman3 - An issue was discovered in Mailman Core before 3.3.5. An attacker with access to...
vendor_debian·2021·CVSS 6.3
CVE-2021-34337 [MEDIUM] CVE-2021-34337: mailman3 - An issue was discovered in Mailman Core before 3.3.5. An attacker with access to...
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrary REST API calls. The REST API is bound to localhost by default, limiting the ability for attackers to exploit this, but can optionally be made to listen on other interfaces.
Scope: local
bookworm: resolved (fixed in 3.3.7-1)
bullseye: open
forky: resolved (fixed in 3.3.7-1)
sid: resolved (fixed in 3.3.7-1)
trixie: resolved (fixed in 3.3.7-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://gitlab.com/mailman/mailman/-/commit/e4a39488c4510fcad8851217f10e7337a196bb51https://gitlab.com/mailman/mailman/-/issues/911https://gitlab.com/mailman/mailman/-/tagshttps://gitlab.com/mailman/mailman/-/commit/e4a39488c4510fcad8851217f10e7337a196bb51https://gitlab.com/mailman/mailman/-/issues/911https://gitlab.com/mailman/mailman/-/tags
2023-04-15
Published