Description
Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.
References
- 1667 vdb-entry
- FreeBSD-SA-00:51 vendor-advisory
- mailman-execute-external-commands(5493) vdb-entry
- 20000907 Mailman 1.1 + external archiver vulnerability mailing-list