1611 matches found
Important: Red Hat Security Advisory: mailman security update
Updated mailman packages that close a DoS vulnerability present in mailman versions prior to version 2.1 are now available. Mailman is a mailing list manager. Matthew Galgoci of Red Hat discovered a Denial of Service DoS vulnerability in versions of Mailman prior to 2.1. An attacker could send a...
[SECURITY] [DSA 436-1] New mailman packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 436-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 8th, 2004 http://www.debian.org/security/faq -...
DSA-436 mailman - several vulnerabilities
Bulletin has no description...
Important: Red Hat Security Advisory: : Updated mailman packages close cross-site scripting vulnerabilities
Updated mailman packages that close various cross-site scripting vulnerabilities are now available. Mailman is a mailing list manager. Dirk Mueller discovered a cross-site scripting bug in the admin interface in versions of Mailman 2.1 before 2.1.4. The Common Vulnerabilities and Exposures projec...
CVE-2003-0965
Cross-site scripting XSS vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities...
CVE-2003-0992
Cross-site scripting XSS vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users...
CVE-2003-0965
CVE-2003-0965 is a cross-site scripting (XSS) vulnerability in the Mailman admin CGI script before 2.1.4. The issue allows remote attackers to steal session cookies and perform unauthorized activities via the administrative interface. Affected: Mailman (admin CGI). Root cause: XSS in the admin UI...
CVE-2003-0992
CVE-2003-0992 is a documented cross-site scripting vulnerability in Mailman’s create CGI script, exploitable to steal cookies of other users. Affected versions are Mailman 2.1.x before 2.1.3; the issue is fixed in later releases (e.g., patches included in 2.1.3 and newer). The linked OpenVAS/Ness...
CVE-2003-0965
Removed by vendor...
CVE-2003-0992
Removed by vendor...
CVE-2003-0965: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities...
CVE-2003-0992: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users...
mailman XSS in admin script
Dirk Mueller reports: I've found a cross-site scripting vulnerability in the admin interface of mailman 2.1.3 that allows, under certain circumstances, for anyone to retrieve the valid session cookie...
mailman denial-of-service vulnerability in MailCommandHandler
A malformed message could cause mailman to crash...
CVE-2002-0389
Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives...
CVE-2002-0389
CVE-2002-0389 concerns Pipermail in Mailman, where private mail messages are stored with predictable filenames in a world-executable directory, allowing local users to read private mailing list archives. The connected advisories corroborate the issue within Mailman and reference multiple CVEs (no...
CVE-2002-0389: Undefined Security Weakness
Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives...
mailman XSS in user options page
From the 2.1.1 release notes: Closed a cross-site scripting vulnerability in the user options page...
