The Debian mailman package uses weak authentication, which allows malicious users to gain privileges.
debian debian linux 2.1