PT-2011-2573

Name of the Vulnerable Software and Affected Versions GNU Mailman versions 2.1.14 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the full name or username field in a confirmation message, potentially leading to cross-site scripting XSS attacks...

Debian DSA-2170-1 : mailman - several vulnerabilities

Two cross site scripting vulnerabilities were been discovered in Mailman, a web-based mailing list manager. These allowed an attacker to retrieve session cookies via inserting crafted JavaScript into confirmation messages CVE-2011-0707 and in the list admin interface CVE-2010-3089; oldstable only...

[SECURITY] [DSA 2170-1] mailman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2170-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 18, 2011 http://www.debian.org/security/faq -...

CVE-2011-0707

Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

DSA-2170-1 mailman - several vulnerabilities

Bulletin has no description...

mailman -- XSS vulnerability

CVE reports: Multiple cross-site scripting XSS vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 full name or 2 username field in a confirmation message...

Fedora Update for mailman FEDORA-2010-14834

Check for the Version of mailman OpenVAS Vulnerability Test Fedora Update for mailman FEDORA-2010-14834 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for mailman FEDORA-2010-14877

Check for the Version of mailman OpenVAS Vulnerability Test Fedora Update for mailman FEDORA-2010-14877 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for mailman FEDORA-2010-14834

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mailman FEDORA-2010-14877

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : mailman-2.1.12-16.fc13 (2010-14877)

Fix of CVE-2010-3089 Mailman: Multiple security flaws leading to cross-site scripting XSS attacks Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 14 : mailman-2.1.13-6.fc14.1 (2010-14834)

Fix of CVE-2010-3089 Mailman: Multiple security flaws leading to cross-site scripting XSS attacks and rebuild to fix gcc bug. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...

[SECURITY] Fedora 14 Update: mailman-2.1.13-6.fc14.1

Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a webpage, and allows users to subscribe, unsubscribe, etc. over the Web. Even the list manager can administer his or her list entirely from...

[SECURITY] Fedora 13 Update: mailman-2.1.12-16.fc13

Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a webpage, and allows users to subscribe, unsubscribe, etc. over the Web. Even the list manager can administer his or her list entirely from...

FreeBSD Ports: mailman

The remote host is missing an update to the system as announced in the referenced advisory. VID 4ab29e12-e787-11df-adfa-00e0815b8da8 OpenVAS Vulnerability Test $ Description: Auto generated from VID 4ab29e12-e787-11df-adfa-00e0815b8da8 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: mailman

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : Mailman -- XSS in web interface (4ab29e12-e787-11df-adfa-00e0815b8da8)

Secunia reports : Two vulnerabilities have been reported in Mailman, which can be exploited by malicious users to conduct script insertion attacks. Certain input passed via the list descriptions is not properly sanitised before being displayed to the user. This can be exploited to insert arbitrar...

MDVA-2010:212 : mailman

The install of mailman failed because of a problem in the rpm scripts, additionally the logrotation script was fixed. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...

Mandriva Linux Security Advisory : mailman (MDVSA-2010:191)

Multiple vulnerabilities has been found and corrected in mailman : Multiple cross-site scripting XSS vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving 1 the list information field or 2 the list description...

[ MDVSA-2010:191 ] mailman

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:191 http://www.mandriva.com/security/ Package : mailman Date : October 1, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple...