Description
Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter.
References
- mailman-open-execute-commands(8202) vdb-entry
- 4105 vdb-entry
- 20020214 Add2it Mailman command execution mailing-list
- http://www.add2it.com/scripts/mailman-free-history.shtml