CVE-2004-1143
Estado: ModificadaAlta (7.5)—
The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.62%
- Percentil entre todas las CVEs puntuadas: 75
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286796
- http://marc.info/?l=bugtraq&m=110549296126351&w=2
- http://secunia.com/advisories/13603/
- http://www.novell.com/linux/security/advisories/2005_07_mailman.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18857
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286796
- http://marc.info/?l=bugtraq&m=110549296126351&w=2
- http://secunia.com/advisories/13603/
- http://www.novell.com/linux/security/advisories/2005_07_mailman.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18857
JSON original (NVD)
Mostrar
{
"id": "CVE-2004-1143",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2004-12-31T05:00:00.000",
"references": [
{
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286796",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=110549296126351&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/13603/",
"source": "cve@mitre.org"
},
{
"url": "http://www.novell.com/linux/security/advisories/2005_07_mailman.html",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18857",
"source": "cve@mitre.org"
},
{
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286796",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=110549296126351&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/13603/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.novell.com/linux/security/advisories/2005_07_mailman.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18857",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which makes it easier for remote attackers to guess passwords via a brute force attack."
}
],
"lastModified": "2026-06-16T22:07:07.653",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gnu:mailman:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46CF8999-445E-4E03-89F1-81669F9F93D8"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D965E3E-E08C-40EA-AF66-470F473F0262"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64179C1D-C96F-431F-AD80-CBCA77CB9E53"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC6B30F6-70A8-43C7-BA5C-6DD8A6ED829D"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "767101D3-ABB0-4D34-AA28-75F78A392F39"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0:beta5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BEB60D06-E9D0-4949-8542-334D180F491D"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F884774-D1A1-42A6-A3FE-9B0500725666"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C56B981-FD66-46F2-806A-3FFDEC520482"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E3E1994-6CAC-48E9-8438-0D894A76FE66"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB8742B0-A91D-457D-BF57-06AFC5219BF9"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F04EDBE-4B04-4B4C-A2BE-5286AC7C8952"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "615566E3-9EBD-49B3-9727-0883D3F0334B"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F59D0CCF-3CD0-4D99-B1F1-38F331422801"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FADF5CE8-D072-4CFE-8A96-BA86187B478B"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72278005-5F2A-4459-8813-DF7EC2D1F063"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E39A909-E266-4BA9-87C6-DE26052433E9"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABA16FD9-0625-4D3D-9F10-130A28C88DA2"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE33EFBF-E155-4C3B-93CC-63AA1266A8A2"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.0.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78F2FB70-7EB9-4AA7-9E85-C151C3CC8104"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1D6A976-FFEA-4DB6-B002-8036E778C78E"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8894855-E303-4B55-B3BC-DCBE3A0AB703"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B1500D8-952A-46C6-920C-096760C36A43"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "503D7346-4891-40B1-A0CD-0FACC5359431"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "643610C6-99A9-43C9-A8FC-463A244C08DE"
},
{
"criteria": "cpe:2.3:a:gnu:mailman:2.1b1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "085C333C-E2E7-4ACD-9CC8-C37C67725954"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}