Debian DSA-094-1 : mailman - XSS hole

Barry A. Warsaw reported several cross-site scripting security holes in Mailman, due to non-existent escaping of CGI variables. These have been fixed upstream in version 2.0.8, and the relevant patches have been backported to version 1.1-10 in Debian. %NASLMINLEVEL 70300 C Tenable Network Securit...

Debian DSA-436-1 : mailman - several vulnerabilities

Several vulnerabilities have been fixed in the mailman package : - CAN-2003-0038 - potential cross-site scripting via certain CGI parameters not known to be exploitable in this version - CAN-2003-0965 - cross-site scripting in the administrative interface - CAN-2003-0991 - certain malformed email...

CVE-2003-0991

Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service crash via malformed e-mail commands...

CVE-2003-0991

CVE-2003-0991 concerns the Mailman mail command handler. Multiple connected sources confirm this is a vulnerability in Mailman prior to 2.0.14 where certain malformed email commands could crash the mailman process, producing a denial-of-service condition. Debian advisories (DSA-436-1/DSA-436-2) a...

CVE-2003-0991

Removed by vendor...

GLSA-200406-04 : Mailman: Member password disclosure vulnerability

The remote host is affected by the vulnerability described in GLSA-200406-04 Mailman: Member password disclosure vulnerability Mailman contains an unspecified vulnerability in the handling of request emails. Impact : By sending a carefully crafted email request to the mailman server an attacker...

CVE-2004-0412

Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server...

CVE-2004-0412

Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server...

GNU Mailman Multiple Unspecified Remote Vulnerabilities

Binary data 2523.prm...

GNU Mailman < 2.1.8 Multiple Vulnerabilities

Binary data 3507.prm...

Mandrake Linux Security Advisory : mailman (MDKSA-2004:051)

Mailman versions = 2.1 have an issue where 3rd parties can retrieve member passwords from the server. The updated packages have a patch backported from 2.1.5 to correct the issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mandrake Linux Security Advisory : mailman (MDKSA-2004:013)

A cross-site scripting vulnerability was discovered in mailman's administration interface CVE-2003-0965. This affects version 2.1 earlier than 2.1.4. Certain malformed email commands could cause the mailman process to crash. CVE-2003-0991. This affects version 2.0 earler than 2.0.14. Another...

Fedora Core 1 : mailman-2.1.5-6 (2004-167)

Fixes security issue CVE-2004-0412 noted in bug https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=123559 Mailman subscriber passwords could be retrieved by a remote attacker. Security hole is fixed in mailman-2.1.5 Important Installation Note: Some users have reported problems with bad queue...

Fedora Core 1 : mailman-2.1.4-1 (2004-060)

A cross-site scripting XSS vulnerability exists in the admin CGI script for Mailman before 2.1.4. This update moves Mailman to version 2.1.4 which is not vulnerable to this issue. Updated packages were made available in February 2004 however the original update notification email did not make it ...

Fedora Core 2 : mailman-2.1.5-7 (2004-168)

Fixes security issue CVE-2004-0412 noted in bug https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=123559 Mailman subscriber passwords could be retrieved by a remote attacker. Security hole is fixed in mailman-2.1.5 Important Installation Note: Some users have reported problems with bad queue...

RHEL 2.1 : mailman (RHSA-2004:156)

An updated mailman package that closes a DoS vulnerability in mailman introduced by RHSA-2004:019 is now available. Mailman is a mailing list manager. On February 19 2004, Red Hat issued security erratum RHSA-2004:019 to correct a DoS Denial of Service vulnerability where an attacker could send a...

RHEL 2.1 : mailman (RHSA-2002:181)

Updated mailman packages are now available for Red Hat Linux Advanced Server. These updates close a cross-site scripting vulnerability present in mailman versions prior to version 2.0.12. Mailman versions prior to 2.0.12 contain a cross-site scripting vulnerability in the processing of invalid...

FreeBSD : mailman XSS in user options page (102)

The following package needs to be updated: mailman %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg00263aa367a811d880e30020ed76ef5a.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : mailman XSS in create script (103)

The following package needs to be updated: mailman %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg429249d267a711d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : mailman (RHSA-2002:125)

Updated mailman packages are now available for Red Hat Linux Advanced Server. These updates resolve a cross-site scripting vulnerability present in versions of Mailman prior to 2.0.11. Two cross-site scripting vulnerabilities have been discovered in versions of Mailman prior to version 2.0.11...