• info
• discussion
• exploit
• solution
• references

Endymion MailMan Remote Arbitrary Command Execution Vulnerability

Solution:
Upgrades available:


Endymion MailMan WebMail 3.0.20

• Endymion UNIX Professional 3.0.27 mmprool.tgz
  http://endymion.com/products/mailman/update/mmprool.tgz


• Endymion UNIX Standard Edition 3.0.27 mmstdol.tgz
  http://endymion.com/products/mailman/update/mmstdol.tgz


• Endymion Windows Professional 3.0.27 mmprool.zip
  http://endymion.com/products/mailman/update/mmprool.zip


• Endymion Windows Standard 3.0.27 mmstdol.zip
  http://endymion.com/products/mailman/update/mmstdol.zip

Endymion MailMan WebMail 3.0.21

• Endymion UNIX Professional 3.0.27 mmprool.tgz
  http://endymion.com/products/mailman/update/mmprool.tgz


• Endymion UNIX Standard Edition 3.0.27 mmstdol.tgz
  http://endymion.com/products/mailman/update/mmstdol.tgz


• Endymion Windows Professional 3.0.27 mmprool.zip
  http://endymion.com/products/mailman/update/mmprool.zip


• Endymion Windows Standard 3.0.27 mmstdol.zip
  http://endymion.com/products/mailman/update/mmstdol.zip

Endymion MailMan WebMail 3.0.22

• Endymion UNIX Professional 3.0.27 mmprool.tgz
  http://endymion.com/products/mailman/update/mmprool.tgz


• Endymion UNIX Standard Edition 3.0.27 mmstdol.tgz
  http://endymion.com/products/mailman/update/mmstdol.tgz


• Endymion Windows Professional 3.0.27 mmprool.zip
  http://endymion.com/products/mailman/update/mmprool.zip


• Endymion Windows Standard 3.0.27 mmstdol.zip
  http://endymion.com/products/mailman/update/mmstdol.zip

Endymion MailMan WebMail 3.0.23

• Endymion UNIX Professional 3.0.27 mmprool.tgz
  http://endymion.com/products/mailman/update/mmprool.tgz


• Endymion UNIX Standard Edition 3.0.27 mmstdol.tgz
  http://endymion.com/products/mailman/update/mmstdol.tgz


• Endymion Windows Professional 3.0.27 mmprool.zip
  http://endymion.com/products/mailman/update/mmprool.zip


• Endymion Windows Standard 3.0.27 mmstdol.zip
  http://endymion.com/products/mailman/update/mmstdol.zip

Endymion MailMan WebMail 3.0.24

• Endymion UNIX Professional 3.0.27 mmprool.tgz
  http://endymion.com/products/mailman/update/mmprool.tgz


• Endymion UNIX Standard Edition 3.0.27 mmstdol.tgz
  http://endymion.com/products/mailman/update/mmstdol.tgz


• Endymion Windows Professional 3.0.27 mmprool.zip
  http://endymion.com/products/mailman/update/mmprool.zip


• Endymion Windows Standard 3.0.27 mmstdol.zip
  http://endymion.com/products/mailman/update/mmstdol.zip

Endymion MailMan WebMail 3.0.25

• Endymion UNIX Professional 3.0.27 mmprool.tgz
  http://endymion.com/products/mailman/update/mmprool.tgz


• Endymion UNIX Standard Edition 3.0.27 mmstdol.tgz
  http://endymion.com/products/mailman/update/mmstdol.tgz


• Endymion Windows Professional 3.0.27 mmprool.zip
  http://endymion.com/products/mailman/update/mmprool.zip


• Endymion Windows Standard 3.0.27 mmstdol.zip
  http://endymion.com/products/mailman/update/mmstdol.zip