The vulnerability of Mailman, a software for managing email distributions, stems from the lack of protective measures taken to safeguard the website structure. This vulnerability allows attackers to compromise the integrity of the data.

The vulnerability of the Mailman email distribution software is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

USN-4406-1 mailman vulnerability

It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to inject arbitrary content in the login page...

Ubuntu 16.04 LTS / 18.04 LTS : Mailman vulnerability (USN-4354-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4354-1 advisory. It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to inject arbitrary content in the login...

CVE-2020-12108

/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection...

Vulnerability fixed in Mailman

A vulnerability has been fixed in Debian for Mailman. The vulnerability allows a remote malicious person to perform a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visit the application. -= Debian =- Debian has made...

mailman: Mishandled URLs in Utils.py:GetPathPieces() allows attackers to display arbitrary text on trusted sites

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site...

NewStart CGSL MAIN 4.05 : mailman Vulnerability (NS-SA-2019-0122)

The remote NewStart CGSL host, running version MAIN 4.05, has mailman packages installed that are affected by a vulnerability: - A cross-site scripting XSS flaw was found in mailman. An attacker, able to trick the user into visiting a specific URL, can execute arbitrary web scripts on the user's...

CVE-2018-0618

Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

USN-3563-1 mailman vulnerability

It was discovered that Mailman incorrectly handled certain web scripts. An attacker could possibly use this to inject arbitrary code...

CVE-2018-5950

Cross-site scripting XSS vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL...

USN-2558-1 mailman vulnerability

It was discovered that Mailman incorrectly handled special characters in list names. A local attacker could use this issue to perform a path traversal attack and execute arbitrary code as the Mailman user...

Endymion MailMan 3.0..x Remote Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2063/info A vulnerability exists in 3.x versions of Endymion MailMan Webmail prior to release 3.0.26. The widely-used Perl script provides a web-email interface. Affected versions make insecure use of the perl open...

Ubuntu Update for mailman vulnerability USN-586-1

Ubuntu Update for Linux kernel vulnerabilities USN-586-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5861.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mailman vulnerability USN-586-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CVE-2006-2191

Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable...

CVE-2006-4624

CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the error log and possibly trick the administrator into visiting malicious URLs via CRLF sequences in the URI...

security flaw

Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service application crash...

USN-78-2: Fixed mailman packages for USN-78-1

Ubuntu Security Announce USN-78-1 described a path traversal vulnerability in the "private" module of Mailman. Unfortunately this updated mailman package was broken so that the "private" module could not be executed at all any more. The latest package version fixes this. We apologize for the...

GLSA-200501-29 : Mailman: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200501-29 Mailman: XSS vulnerability Florian Weimer has discovered a cross-site scripting vulnerability in the error messages that are produced by Mailman. Impact : By enticing a user to visiting a specially crafted URL, an attack...

GLSA-200502-11 : Mailman: Directory traversal vulnerability

The remote host is affected by the vulnerability described in GLSA-200502-11 Mailman: Directory traversal vulnerability Mailman contains an error in private.py which fails to properly sanitize input paths. Impact : An attacker could exploit this flaw to obtain arbitrary files on the web server...

USN-78-1: Mailman vulnerability

An path traversal vulnerability has been discovered in the "private" module of Mailman. A flawed path sanitation algorithm allowed the construction of URLS to arbitrary files readable by Mailman. This allowed a remote attacker to retrieve configuration and password databases, private list archive...