CVE-2005-0080

The 55optionstraceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address...

CVE-2005-0080

The 55optionstraceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address...

CVE-2005-0202

Directory traversal vulnerability in the truepath function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences...

CVE-2005-0202

Directory traversal vulnerability in the truepath function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences...

Endymion MailMan Detection

Binary data 2742.prm...

Important: Red Hat Security Advisory: mailman security update

An updated mailman package that corrects a cross-site scripting flaw is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Mailman manages electronic mail discussion and e-newsletter lists. A cross-site scripting XSS flaw in the...

security flaw

Cross-site scripting XSS vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page...

Mac OS X Multiple Vulnerabilities (Security Update 2005-003)

The remote host is missing Security Update 2005-003. This security update contains security fixes for the following applications : - AFP Server - Bluetooth Setup Assistant - Core Foundation - Cyrus IMAP - Cyrus SASL - Folder Permissions - Mailman - Safari These programs have multiple...

RHEL 4 : mailman (RHSA-2005:235)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:235 advisory. Mailman manages electronic mail discussion and e-newsletter lists. A cross-site scripting XSS flaw in the driver script of mailman prior to version...

RHEL 4 : mailman (RHSA-2005:137)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:137 advisory. Mailman is software to help manage email discussion lists. A flaw in the truepath function of Mailman was discovered. A remote attacker who is a membe...

[SECURITY] [DSA 674-3] New mailman packages really fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 674-3 [email protected] http://www.debian.org/security/ Martin Schulze February 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 674-3] New mailman packages really fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 674-3 [email protected] http://www.debian.org/security/ Martin Schulze February 21st, 2005 http://www.debian.org/security/faq -...

DSA-674-2 mailman - cross-site scripting, directory traversal

Due to an incompatibility between Python 1.5 and 2.1 the last mailman update did not run with Python 1.5 anymore. This problem is corrected with this update. This advisory only updates the packages updated with DSA 674-2. The version in unstable is not affected since it is not supposed to work wi...

DSA-674-3 mailman - cross-site scripting, directory traversal

Due to an incompatibility between Python 1.5 and 2.1 the last mailman update did not run with Python 1.5 anymore. This problem is corrected with this update. This advisory only updates the packages updated with DSA 674-2. The version in unstable is not affected since it is not supposed to work wi...

USN-78-2: Fixed mailman packages for USN-78-1

Ubuntu Security Announce USN-78-1 described a path traversal vulnerability in the "private" module of Mailman. Unfortunately this updated mailman package was broken so that the "private" module could not be executed at all any more. The latest package version fixes this. We apologize for the...

Important: Red Hat Security Advisory: mailman security update

Updated mailman packages to correct a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mailman is software to help manage email discussion lists. A flaw in the truepath function o...

security flaw

Directory traversal vulnerability in the truepath function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences...

Mandrake Linux Security Advisory : mailman (MDKSA-2005:037)

A vulnerability was discovered in Mailman, which allows a remote directory traversal exploit using URLs of the form '.../....///' to access private Mailman configuration data. The vulnerability lies in the Mailman/Cgi/private.py file. Updated packages correct this issue. %NASLMINLEVEL 70300 C...

GLSA-200501-29 : Mailman: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200501-29 Mailman: XSS vulnerability Florian Weimer has discovered a cross-site scripting vulnerability in the error messages that are produced by Mailman. Impact : By enticing a user to visiting a specially crafted URL, an attack...

SUSE-SA:2005:007: mailman

The remote host is missing the patch for the advisory SUSE-SA:2005:007 mailman. Mailman is a flexible mailing list management tool. It provides mail controlled subscription front ends and also includes CGI scripts to handle subscription, moderation and archive retrieval and other options. Due to...