Vulnerability Database

300,214

Total vulnerabilities in the database

CVE-2003-1367

The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command.

  • Published: Dec 31, 2003
  • Updated: Nov 9, 2025
  • CVE: CVE-2003-1367
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.8
  • AV:N/AC:L/Au:N/C:C/I:N/A:N

CWEs:

OWASP TOP 10: