Description

Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives.

Remediation

References

CVE-2002-0389

Related Vulnerabilities

WordPress Plugin NextMove Lite-Thank You Page for WooCommerce Cross-Site Request Forgery (2.18.1)

WordPress Plugin Social Networking & E-commerce Arbitrary File Upload (0.0.32)

CrushFTP Server Other Vulnerability (CVE-2025-31161)

Squid Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2019-12526)

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5731)

Severity

Low

Tags

Missing Update Known Vulnerabilities CVE-2002-0389