Lucene search

K
freebsdFreeBSDF47F2746-12C5-11DD-BAB7-0016179B2DD5
HistoryFeb 05, 2008 - 12:00 a.m.

mailman -- script insertion vulnerability

2008-02-0500:00:00
vuxml.freebsd.org
10

0.005 Low

EPSS

Percentile

75.1%

Secunia reports:

A vulnerability has been reported in Mailman, which can be
exploited by malicious users to conduct script insertion
attacks.
Certain input when editing the list templates and the list info
attribute is not properly sanitised before being stored. This can be
exploited to insert arbitrary HTML and script code, which is
executed in a user’s browser session in context of an affected site
when the malicious website is accessed.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchja-mailman< 2.1.10UNKNOWN
FreeBSDanynoarchmailman< 2.1.10UNKNOWN
FreeBSDanynoarchmailman-with-htdig< 2.1.10UNKNOWN