1492 matches found
CVE-2006-1712
Removed by vendor...
CVE-2006-1712
Cross-site scripting XSS vulnerability in the private archive script private.py in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument...
CVE-2006-1712
CVE-2006-1712 affects GNU Mailman 2.1.7: the private archive script (private.py) is vulnerable to cross-site scripting (XSS) via the action parameter, allowing remote injection of arbitrary script/HTML that could run in a user’s browser within the vulnerable site’s context. The description is cor...
Mailman mailing lists manager crossite scripting
No description provided...
[SA19558] Mailman Private Archive Script Cross-Site Scripting
TITLE: Mailman Private Archive Script Cross-Site Scripting SECUNIA ADVISORY ID: SA19558 VERIFY ADVISORY: http://secunia.com/advisories/19558/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Mailman 2.x http://secunia.com/product/1010/ DESCRIPTION: A vulnerability...
mailman -- Private Archive Script Cross-Site Scripting
Secunia reports: A vulnerability has been reported in Mailman, which can be exploited by malicious people to conduct cross-site scripting attacks. Unspecified input passed to the private archive script is not properly sanitised before being returned to users. This can be exploited to execute...
[SECURITY] [DSA 1027-1] New mailman packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1027-1 [email protected] http://www.debian.org/security/ Steve Kemp April 6th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1027-1] New mailman packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1027-1 [email protected] http://www.debian.org/security/ Steve Kemp April 6th, 2006 http://www.debian.org/security/faq -...
DSA-1027-1 mailman - programming error
Bulletin has no description...
USN-267-1: mailman vulnerability
A remote Denial of Service vulnerability was discovered in the decoder for multipart messages. Certain parts of type "message/delivery-status" or parts containing only two blank lines triggered an exception. An attacker could exploit this to crash Mailman by sending a specially crafted email to a...
Ubuntu 4.10 / 5.04 / 5.10 : mailman vulnerability (USN-267-1)
A remote Denial of Service vulnerability was discovered in the decoder for multipart messages. Certain parts of type 'message/delivery-status' or parts containing only two blank lines triggered an exception. An attacker could exploit this to crash Mailman by sending a specially crafted email to a...
MDKSA-2006:061 : mailman
Scrubber.py, in Mailman 2.1.5 and earlier, when using email 2.5 part of Python, is susceptible to a DoS mailman service stops delivering for the list in question if it encounters a badly formed mime multipart message with only one part and that part has two blank lines between the first boundary...
Design/Logic Flaw
The attachment scrubber Scrubber.py in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service mailing list delivery failure via a multipart MIME message with a single part that has two blank lines between the first boundary an...
CVE-2006-0052
The attachment scrubber Scrubber.py in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service mailing list delivery failure via a multipart MIME message with a single part that has two blank lines between the first boundary an...
CVE-2006-0052
The attachment scrubber Scrubber.py in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service mailing list delivery failure via a multipart MIME message with a single part that has two blank lines between the first boundary an...
CVE-2006-0052
Removed by vendor...
CVE-2006-0052
CVE-2006-0052 affects Mailman 2.1.5 and earlier when used with Python’s email library 2.5. A malformed MIME multipart message (a single part with two blank lines between the first and end boundaries) can cause a denial of service by blocking mailing-list delivery. Root cause involves how Mailman ...
CVE-2006-0052
The attachment scrubber Scrubber.py in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service mailing list delivery failure via a multipart MIME message with a single part that has two blank lines between the first boundary an...
[ MDKSA-2006:061 ] - Updated mailman packages fix DoS from badly formed mime multipart messages.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:061 http://www.mandriva.com/security/ Package : mailman Date : March 29, 2006 Affected: 10.2, Corporate 3.0 Problem Description: Scrubber.py, in Mailman 2.1.5 and earlier, when using email 2.5 part of Python...