Description
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header.
References
- 19970824 Vulnerability in Majordomo mailing-list
- majordomo-advertise(502) vdb-entry