1572 matches found
CVE-2003-0992
Cross-site scripting XSS vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users...
Important: Red Hat Security Advisory: mailman security update
Updated mailman packages that close a DoS vulnerability present in mailman versions prior to version 2.1 are now available. Mailman is a mailing list manager. Matthew Galgoci of Red Hat discovered a Denial of Service DoS vulnerability in versions of Mailman prior to 2.1. An attacker could send a...
[SECURITY] [DSA 436-1] New mailman packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 436-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 8th, 2004 http://www.debian.org/security/faq -...
DSA-436 mailman - several vulnerabilities
Bulletin has no description...
Important: Red Hat Security Advisory: : Updated mailman packages close cross-site scripting vulnerabilities
Updated mailman packages that close various cross-site scripting vulnerabilities are now available. Mailman is a mailing list manager. Dirk Mueller discovered a cross-site scripting bug in the admin interface in versions of Mailman 2.1 before 2.1.4. The Common Vulnerabilities and Exposures projec...
CVE-2003-0992
CVE-2003-0992 is a documented cross-site scripting vulnerability in Mailman’s create CGI script, exploitable to steal cookies of other users. Affected versions are Mailman 2.1.x before 2.1.3; the issue is fixed in later releases (e.g., patches included in 2.1.3 and newer). The linked OpenVAS/Ness...
CVE-2003-0992
Cross-site scripting XSS vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users...
CVE-2003-0965
Cross-site scripting XSS vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities...
CVE-2003-0965
CVE-2003-0965 is a cross-site scripting (XSS) vulnerability in the Mailman admin CGI script before 2.1.4. The issue allows remote attackers to steal session cookies and perform unauthorized activities via the administrative interface. Affected: Mailman (admin CGI). Root cause: XSS in the admin UI...
CVE-2003-0965
Removed by vendor...
CVE-2003-0992
Removed by vendor...
CVE-2003-0992: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users...
CVE-2003-0965: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities...
mailman XSS in admin script
Dirk Mueller reports: I've found a cross-site scripting vulnerability in the admin interface of mailman 2.1.3 that allows, under certain circumstances, for anyone to retrieve the valid session cookie...
mailman denial-of-service vulnerability in MailCommandHandler
A malformed message could cause mailman to crash...
CVE-2002-0389
Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives...
CVE-2002-0389
CVE-2002-0389 concerns Pipermail in Mailman, where private mail messages are stored with predictable filenames in a world-executable directory, allowing local users to read private mailing list archives. The connected advisories corroborate the issue within Mailman and reference multiple CVEs (no...
CVE-2002-0389: Undefined Security Weakness
Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives...