RHEL 3 / 4 : mailman (RHSA-2006:0486)

An updated mailman package that fixes a denial of service flaw is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is software to help manage email discussion lists. A flaw was found in...

mailman security update

CentOS Errata and Security Advisory CESA-2006:0486 An updated mailman package that fixes a denial of service flaw is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is software to help...

security flaw

The attachment scrubber Scrubber.py in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service mailing list delivery failure via a multipart MIME message with a single part that has two blank lines between the first boundary an...

Moderate: Red Hat Security Advisory: mailman security update

An updated mailman package that fixes a denial of service flaw is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is software to help manage email discussion lists. A flaw was found in...

mailman -- Multiple Vulnerabilities

Secunia reports: Mailman can be exploited by malicious people to conduct cross-site scripting and phishing attacks, and cause a DoS Denial of Service. 1 An error in the logging functionality can be exploited to inject a spoofed log message into the error log via a specially crafted URL. Successfu...

FreeBSD : mailman -- Private Archive Script XSS (8be2e304-cce6-11da-a3b1-00123ffe8333)

Secunia reports : A vulnerability has been reported in Mailman, which can be exploited by malicious people to conduct cross-site scripting attacks. Unspecified input passed to the private archive script is not properly sanitised before being returned to users. This can be exploited to execute...

CVE-2006-1712

Cross-site scripting XSS vulnerability in the private archive script private.py in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument...

Cross site scripting

Cross-site scripting XSS vulnerability in the private archive script private.py in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument...

CVE-2006-1712

Cross-site scripting XSS vulnerability in the private archive script private.py in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument...

CVE-2006-1712

Cross-site scripting XSS vulnerability in the private archive script private.py in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument...

CVE-2006-1712

CVE-2006-1712 affects GNU Mailman 2.1.7: the private archive script (private.py) is vulnerable to cross-site scripting (XSS) via the action parameter, allowing remote injection of arbitrary script/HTML that could run in a user’s browser within the vulnerable site’s context. The description is cor...

CVE-2006-1712

Removed by vendor...

CVE-2006-1712: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the private archive script private.py in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument...

Mailman mailing lists manager crossite scripting

No description provided...

[SA19558] Mailman Private Archive Script Cross-Site Scripting

TITLE: Mailman Private Archive Script Cross-Site Scripting SECUNIA ADVISORY ID: SA19558 VERIFY ADVISORY: http://secunia.com/advisories/19558/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Mailman 2.x http://secunia.com/product/1010/ DESCRIPTION: A vulnerability...

mailman -- Private Archive Script Cross-Site Scripting

Secunia reports: A vulnerability has been reported in Mailman, which can be exploited by malicious people to conduct cross-site scripting attacks. Unspecified input passed to the private archive script is not properly sanitised before being returned to users. This can be exploited to execute...

[SECURITY] [DSA 1027-1] New mailman packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1027-1 [email protected] http://www.debian.org/security/ Steve Kemp April 6th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1027-1] New mailman packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1027-1 [email protected] http://www.debian.org/security/ Steve Kemp April 6th, 2006 http://www.debian.org/security/faq -...

DSA-1027-1 mailman - programming error

Bulletin has no description...

USN-267-1: mailman vulnerability

A remote Denial of Service vulnerability was discovered in the decoder for multipart messages. Certain parts of type "message/delivery-status" or parts containing only two blank lines triggered an exception. An attacker could exploit this to crash Mailman by sending a specially crafted email to a...