Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.Referenceshttp://www.securityfocus.com/bid/1667http://archives.neohapsis.com/archives/freebsd/2000-09/0112.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5493http://archives.neohapsis.com/archives/bugtraq/2000-09/0040.html
