FreeBSD Ports: mailman, ja-mailman

The remote host is missing an update to the system as announced in the referenced advisory. VID b3cd00f7-c0c5-452d-87bc-086c5635333e OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: mailman, ja-mailman

The remote host is missing an update to the system as announced in the referenced advisory. VID c7ccc33f-7d31-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: mailman, ja-mailman, mailman-with-htdig

The remote host is missing an update to the system as announced in the referenced advisory. VID fffa9257-3c17-11db-86ab-00123ffe8333 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: mailman, ja-mailman, mailman-with-htdig

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: mailman, ja-mailman

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: mailman, ja-mailman

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

openSUSE 10 Security Update : mailman (mailman-5518)

This update of mailman fixes a cross-site-scripting bug CVE-2008-0564 and a mistake in translation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mailman-5518. The text description of this...

SuSE 10 Security Update : mailman (ZYPP Patch Number 5519)

This update of mailman fixes a cross-site scripting bug CVE-2008-0564 and a mistake in translation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid33939;...

FreeBSD : mailman -- script insertion vulnerability (f47f2746-12c5-11dd-bab7-0016179b2dd5)

Secunia reports : A vulnerability has been reported in Mailman, which can be exploited by malicious users to conduct script insertion attacks. Certain input when editing the list templates and the list info attribute is not properly sanitised before being stored. This can be exploited to insert...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : mailman vulnerability (USN-586-1)

Multiple cross-site scripting flaws were discovered in mailman. A malicious list administrator could exploit this to execute arbitrary JavaScript, potentially stealing user credentials. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

USN-586-1: mailman vulnerability

Multiple cross-site scripting flaws were discovered in mailman. A malicious list administrator could exploit this to execute arbitrary JavaScript, potentially stealing user credentials...

Security fix for the ALT Linux 9 package mailman version 5:2.1.10-alt0.3

Feb. 23, 2008 Grigory Batalov 5:2.1.10-alt0.3 - New upstream release 2.1.10 beta 3. - Contains CVE-2008-0564 fix...

Mailman crossite scripting

No description provided...

rPSA-2008-0056-1 mailman

rPath Security Advisory: 2008-0056-1 Published: 2008-02-15 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Weakness Updated Versions: mailman=conary.rpath.com@rpl:1/2.1.9-4.2-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-2207...

Fedora 8 : mailman-2.1.9-8.2.fc8 (2008-1334)

Tue Feb 5 2008 Tomas Smetana - 3:2.1.9-8.2 - patch for CVE-2008-0564; XSS triggerable by list administrator - Thu Jan 10 2008 Tomas Smetana - 3:2.1.9-8.1 - fix 393911 - mail is not added to the archive - Tue Oct 23 2007 Tomas Smetana - 3:2.1.9-8 - fix 333011 -- withlist crashes with NameError...

Fedora 7 : mailman-2.1.9-5.3 (2008-1356)

Tue Feb 5 2008 Tomas Smetana - 3:2.1.9-5.3 - patch for CVE-2008-0564; XSS triggerable by list administrator - Wed Dec 5 2007 Tomas Smetana - 3:2.1.9-5.2 - more LCCTYPE fixes - Tue Oct 16 2007 Tomas Smetana - 3:2.1.9-5.1 - fix 333011 -- withlist crashes with NameError Note that Tenable Network...

[SECURITY] Fedora 7 Update: mailman-2.1.9-5.3

Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a webpage, and allows users to subscribe, unsubscribe, etc. over the Web. Even the list manager can administer his or her list entirely from...

CVE-2008-0564

Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 editing templates and 2 the list's "info attribute" in the web administrator interface, a different vulnerability than...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 editing templates and 2 the list's "info attribute" in the web administrator interface, a different vulnerability than...

CVE-2008-0564

Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 editing templates and 2 the list's "info attribute" in the web administrator interface, a different vulnerability than...