CVE-2005-0080

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-02 · updated 2026-06-16

Description

The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address.

Affected products

GNU Mailman: 2.1.5
Ubuntu Linux: 4.10

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285839
http://marc.info/?l=bugtraq&m=110549296126351&w=2
http://qa.debian.org/bts-security.html
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=285839
http://marc.info/?l=bugtraq&m=110549296126351&w=2
http://qa.debian.org/bts-security.html

Get alerted when CVE-2005-0080 or the next vulnerability affects your stack