CVE-2001-0290

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
May 3, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-029110.0Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that containCVE-2001-02927.5PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling uCVE-2001-02935.0Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET cCVE-2001-02945.0Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GETCVE-2001-02955.0Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a "dir *CVE-2001-029610.0Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command.CVE-2001-02975.0Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files vCVE-2001-02985.0Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via aCVE-2001-02997.5Buffer overflow in Voyager web administration server for Nokia IP440 allows local users to cause a denial of service, and possibly execute aCVE-2001-03002.1oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local usersCVE-2001-030110.0Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large stCVE-2001-03025.0Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitr
CVE-2001-0290: Medium severity, CVSS 4.6 | Vulnix