VULNERABILITY INTELLIGENCE

CVE-2003-1367

CVSS score7.8 HIGH

EPSS probability1.55%

CISA KEVNot currently listed

Published2003-12-31

Last modified2026-06-16

Description

The which_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote attackers to identify the email addresses of members of mailing lists via a "which" command.