Lucene search

K
redhatRedHatRHSA-2004:019
HistoryFeb 09, 2004 - 12:00 a.m.

(RHSA-2004:019) mailman security update

2004-02-0900:00:00
access.redhat.com
12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.015 Low

EPSS

Percentile

85.5%

Mailman is a mailing list manager.

Matthew Galgoci of Red Hat discovered a Denial of Service (DoS)
vulnerability in versions of Mailman prior to 2.1. An attacker could send
a carefully-crafted message causing mailman to crash. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2003-0991 to this issue.

Users of Mailman are advised to upgrade to the erratum packages, which
include a backported security fix and are not vulnerable to this issue.

Red Hat would like to thank Barry Warsaw for providing a patch for this issue.

OSVersionArchitecturePackageVersionFilename
RedHatanyia64mailman< 2.0.13-5mailman-2.0.13-5.ia64.rpm
RedHatanyi386mailman< 2.0.13-5mailman-2.0.13-5.i386.rpm

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.015 Low

EPSS

Percentile

85.5%