GNU Mailman 2.1 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/6678/info A vulnerability has been discovered in GNU Mailman. The issue occurs to insufficient sanitization of user-supplied data which is output when generating error pages. As a result, attackers may embed malicious script code or HTML into a link to a...

Mailman: cross-site scripting bug

Product: Mailman Affected Version: 2.1 not other version has been tested Vendor's URL: http://www.gnu.org/software/mailman/ Solution: TBC Author: Manuel Rodriguez Introduction: ------------ Mailman is software to help manage electronic mail discussion lists, much like Majordomo or Smartmail. And...

GNU Mailman 2.1 - 'email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/6677/info A vulnerability has been discovered in GNU Mailman. It has been reported that Mailman is prone to cross site scripting attacks. This is due to insufficient santization of URI parameters. As a result, attackers may embed malicious script code or...

CVE-2002-0855

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the 1 adminpw or 2 info parameters to the ml-name feature...

Important: Red Hat Security Advisory: mailman security update

Updated mailman packages are now available for Red Hat Linux Advanced Server. These updates close a cross-site scripting vulnerability present in mailman versions prior to version 2.0.12. Mailman versions prior to 2.0.12 contain a cross-site scripting vulnerability in the processing of invalid...

Important: Red Hat Security Advisory: : Updated mailman packages close cross-site scripting vulnerability

Updated mailman packages are now available for Red Hat Secure Web Server 3.2 U.S.. These updates close a cross-site scripting vulnerability present in mailman versions prior to version 2.0.12. Mailman versions prior to 2.0.12 contain a cross-site scripting vulnerability in the processing of inval...

security flaw

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the 1 adminpw or 2 info parameters to the ml-name feature...

[SECURITY] [DSA 147-2] New mailman packages fix cross-site scripting problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 147-2 [email protected] http://www.debian.org/security/ Martin Schulze August 26th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 147-2] New mailman packages fix cross-site scripting problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 147-2 [email protected] http://www.debian.org/security/ Martin Schulze August 26th, 2002 http://www.debian.org/security/faq -...

security flaw

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the 1 adminpw or 2 info parameters to the ml-name feature...

Important: Red Hat Security Advisory: : Updated mailman packages close cross-site scripting vulnerability

Updated mailman packages are now available for Red Hat Power Tools 7 and 7.1. These updates close a cross-site scripting vulnerability present in mailman versions prior to version 2.0.12. Mailman versions prior to 2.0.12 contain a cross-site scripting vulnerability in the processing of invalid...

Important: Red Hat Security Advisory: : Updated mailman packages close cross-site scripting vulnerability

Updated mailman packages are now available for Red Hat Linux 7.2 and 7.3. These updates close a cross-site scripting vulnerability present in mailman versions prior to version 2.0.12. Mailman versions prior to 2.0.12 contain a cross-site scripting vulnerability in the processing of invalid reques...

CVE-2002-0855

Removed by vendor...

CVE-2002-0855

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the 1 adminpw or 2 info parameters to the ml-name feature...

CVE-2002-0855

CVE-2002-0855 describes a cross-site scripting vulnerability in Mailman prior to 2.0.12. Theissue allows remote attackers to execute script as other users by crafting a subscriber’s list subscription options in the ml-name feature via the (1) adminpw or (2) info parameters. Connected advisories c...

CVE-2002-0417

Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. dot dot and a null character in the ALTERNATETEMPLATES parameter for various mmstdo.cgi programs...

[SECURITY] [DSA 147-1] New mailman packages fix cross-site scripting problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 147-1 [email protected] http://www.debian.org/security/ Martin Schulze August 8th, 2002 - -------------------------------------------------------------------------- Package : mailman...

[SECURITY] [DSA 147-1] New mailman packages fix cross-site scripting problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 147-1 [email protected] http://www.debian.org/security/ Martin Schulze August 8th, 2002 - -------------------------------------------------------------------------- Package : mailman...

DSA-147 mailman - cross-site scripting

Bulletin has no description...

cross-site scripting bug of Mailman

Mailman: cross-site scripting bug Product: Mailman Affected Version: 2.0.11 and under it Vendor's URL: http://www.gnu.org/software/mailman/ Solution: Use fixed version 2.0.12 or later Introduction: ------------ Mailman is software to help manage electronic mail discussion lists, much like Majordo...