Approved changes feed: RSS · Atom

cpe:2.3:a:endymion:mailman_webmail:3.0.20:*:*:*:*:*:*:*

part: a version: 3.0.20 update: *

VendorEndymion (076f7bb1-49ed-5a49-bc8a-3fcbb4b40a73)
ProductMailman Webmail (82a5b72d-5769-5c84-9128-1d0cfc8c6247)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-0417 vulnerable 2026-06-08 04:46:21.394998 Details available
Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:49:28.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0021 vulnerable 2026-06-08 04:45:19.582637 Details available
MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter.
Published: 2001-05-07T04:00:00.000Z
Updated: 2024-08-08T04:06:54.651Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.