CVE-2006-2941

Mailman vulnerability CVE-2006-2941 affects Mailman prior to 2.1.9rc1, involving how RFC 2231 formatted headers are processed. Exploitation can lead to a denial of service on mailing lists. Connected advisories (Red Hat RHSA-2006:0600, Ubuntu USN-345-1, SuSE/SLES9 updates, Gentoo GLSA 200609-12, ...

CVE-2006-2941

Removed by vendor...

CVE-2006-3636

Removed by vendor...

CVE-2006-3636

CVE-2006-3636 corresponds to multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman. The initial entry cites Mailman versions before 2.1.9rc1 as vulnerable via unspecified vectors, enabling remote attackers to inject arbitrary script/HTML. Connected documents corroborate this family o...

Mailman Utils.py Spoofed Log Entry Injection

The version of Mailman installed on the remote host fails to sanitize user-supplied input before writing it to the application's 'error' log. An unauthenticated, remote attacker can leverage this flaw to spoof log messages. In addition, the application reportedly is affected by a denial of servic...

FreeBSD : mailman -- Multiple Vulnerabilities (fffa9257-3c17-11db-86ab-00123ffe8333)

Secunia reports : Mailman can be exploited by malicious people to conduct cross-site scripting and phishing attacks, and cause a DoS Denial of Service. 1 An error in the logging functionality can be exploited to inject a spoofed log message into the error log via a specially crafted URL. Successf...

Mailman < 2.1.9rc1 Spoofed Log Entry Injection

Binary data 3737.prm...

[SA21732] Mailman Multiple Vulnerabilities

TITLE: Mailman Multiple Vulnerabilities SECUNIA ADVISORY ID: SA21732 VERIFY ADVISORY: http://secunia.com/advisories/21732/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Spoofing, DoS WHERE: From remote SOFTWARE: Mailman 2.x http://secunia.com/product/1010/ DESCRIPTION: Some...

CentOS 3 / 4 : mailman (CESA-2006:0486)

An updated mailman package that fixes a denial of service flaw is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is software to help manage email discussion lists. A flaw was found in...

CentOS 3 / 4 : mailman (CESA-2006:0204)

An updated mailman package that fixes two security issues is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is software to help manage email discussion lists. A flaw in handling of UT...

CVE-2006-3278

CVE-2006-3278 is an XSS vulnerability in H-Sphere 2.5.1 Beta 1 and earlier. Triggered via parameters next_template, start, curr_menu_id, and arid in psoft/servlet/resadmin/psoft.hsphere.CP when using the mailman/massmail.html template_name, potentially allowing remote attackers to inject arbitrar...

RHEL 3 / 4 : mailman (RHSA-2006:0486)

An updated mailman package that fixes a denial of service flaw is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is software to help manage email discussion lists. A flaw was found in...

mailman security update

CentOS Errata and Security Advisory CESA-2006:0486 An updated mailman package that fixes a denial of service flaw is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is software to help...

Moderate: Red Hat Security Advisory: mailman security update

An updated mailman package that fixes a denial of service flaw is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is software to help manage email discussion lists. A flaw was found in...

security flaw

The attachment scrubber Scrubber.py in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service mailing list delivery failure via a multipart MIME message with a single part that has two blank lines between the first boundary an...

mailman -- Multiple Vulnerabilities

Secunia reports: Mailman can be exploited by malicious people to conduct cross-site scripting and phishing attacks, and cause a DoS Denial of Service. 1 An error in the logging functionality can be exploited to inject a spoofed log message into the error log via a specially crafted URL. Successfu...

FreeBSD : mailman -- Private Archive Script XSS (8be2e304-cce6-11da-a3b1-00123ffe8333)

Secunia reports : A vulnerability has been reported in Mailman, which can be exploited by malicious people to conduct cross-site scripting attacks. Unspecified input passed to the private archive script is not properly sanitised before being returned to users. This can be exploited to execute...

CVE-2006-1712

Cross-site scripting XSS vulnerability in the private archive script private.py in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument...

Cross site scripting

Cross-site scripting XSS vulnerability in the private archive script private.py in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument...

CVE-2006-1712

Cross-site scripting XSS vulnerability in the private archive script private.py in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument...