CVE-2006-3636

Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-3636

Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers"...

CVE-2006-2941

Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers"...

CVE-2006-2941

Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers"...

CVE-2006-3636

Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-2941

Mailman vulnerability CVE-2006-2941 affects Mailman prior to 2.1.9rc1, involving how RFC 2231 formatted headers are processed. Exploitation can lead to a denial of service on mailing lists. Connected advisories (Red Hat RHSA-2006:0600, Ubuntu USN-345-1, SuSE/SLES9 updates, Gentoo GLSA 200609-12, ...

CVE-2006-2941: Undefined Security Weakness

Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers"...

CVE-2006-3636: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-3636

Removed by vendor...

CVE-2006-2941

Removed by vendor...

CVE-2006-2941

Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers"...

CVE-2006-3636

CVE-2006-3636 corresponds to multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman. The initial entry cites Mailman versions before 2.1.9rc1 as vulnerable via unspecified vectors, enabling remote attackers to inject arbitrary script/HTML. Connected documents corroborate this family o...

Mailman < 2.1.9rc1 Spoofed Log Entry Injection

Binary data 3737.prm...

Mailman Utils.py Spoofed Log Entry Injection

The version of Mailman installed on the remote host fails to sanitize user-supplied input before writing it to the application's 'error' log. An unauthenticated, remote attacker can leverage this flaw to spoof log messages. In addition, the application reportedly is affected by a denial of servic...

FreeBSD : mailman -- Multiple Vulnerabilities (fffa9257-3c17-11db-86ab-00123ffe8333)

Secunia reports : Mailman can be exploited by malicious people to conduct cross-site scripting and phishing attacks, and cause a DoS Denial of Service. 1 An error in the logging functionality can be exploited to inject a spoofed log message into the error log via a specially crafted URL. Successf...

[SA21732] Mailman Multiple Vulnerabilities

TITLE: Mailman Multiple Vulnerabilities SECUNIA ADVISORY ID: SA21732 VERIFY ADVISORY: http://secunia.com/advisories/21732/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Spoofing, DoS WHERE: From remote SOFTWARE: Mailman 2.x http://secunia.com/product/1010/ DESCRIPTION: Some...

CentOS 3 / 4 : mailman (CESA-2006:0204)

An updated mailman package that fixes two security issues is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is software to help manage email discussion lists. A flaw in handling of UT...

CentOS 3 / 4 : mailman (CESA-2006:0486)

An updated mailman package that fixes a denial of service flaw is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is software to help manage email discussion lists. A flaw was found in...

CVE-2006-3278

CVE-2006-3278 is an XSS vulnerability in H-Sphere 2.5.1 Beta 1 and earlier. Triggered via parameters next_template, start, curr_menu_id, and arid in psoft/servlet/resadmin/psoft.hsphere.CP when using the mailman/massmail.html template_name, potentially allowing remote attackers to inject arbitrar...