CVE-2017-18415

cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering SEC-302...

CVE-2017-18403

cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives SEC-337...

CVE-2017-18415

cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering SEC-302...

CVE-2017-18403

cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives SEC-337...

Code injection

cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives SEC-337...

Code injection

cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering SEC-302...

CVE-2017-18415

cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering SEC-302...

CVE-2017-18415

CVE-2017-18415 affects cPanel prior to 67.9999.103. The issue is an incorrect environment-variable filtering vulnerability that allows code execution in the context of the mailman account (SEC-302). Root cause: improper handling of environment variables in the affected code path. Impact per refer...

CVE-2017-18403

cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives SEC-337...

CVE-2017-18403

CVE-2017-18403 affects cPanel prior to 68.0.15. The vulnerability allows code execution in the context of the nobody account via Mailman archives (SEC-337). Impact details in the provided documents indicate a potential compromise of systems running affected cPanel versions. The recommended remedi...

CVE-2017-18415: Improper Input Validation

cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering SEC-302...

PT-2019-8338

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows code execution in the context of the nobody account via Mailman archives. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the issue...

CVE-2017-18403: Improper Access Control

cPanel before 68.0.15 allows code execution in the context of the nobody account via Mailman archives SEC-337...

PT-2019-8350

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 67.9999.103 Description The issue allows code execution in the context of the mailman account due to incorrect environment-variable filtering. Recommendations For versions prior to 67.9999.103, update to version...

SUSE SLES11 Security Update : mailman (SUSE-SU-2019:14068-1)

This update for mailman fixes the following issues : Security issue fixed : CVE-2016-6893: Fixed a Cross-site request forgery vulnerability in the admin web interface bsc997205. Following bug was fixed: Allow CSRF check to pass in mailman web frontend if the list name contains a '+' bsc1102416 No...

SUSE-SU-2019:14068-1 Security update for mailman

This update for mailman fixes the following issues: Security issue fixed: - CVE-2016-6893: Fixed a Cross-site request forgery vulnerability in the admin web interface bsc997205. Following bug was fixed: - Allow CSRF check to pass in mailman web frontend if the list name contains a '+' bsc1102416...

Path Traversal

Mailman is a program used to help manage e-mail discussion lists. It was found that mailman did not sanitize the list name before passing it to certain MTAs. A local attacker could use this flaw to execute arbitrary code as the user running mailman. CVE-2015-2775 It was found that mailman stored...

GLSA-201904-10 : Mailman: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201904-10 Mailman: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mailman. Please review the referenced CVE identifier for details. Impact : Please review the referenced CVE identifiers for details...

Mailman: Multiple vulnerabilities

Background Mailman is a Python based mailing list server with an extensive web interface. Description Multiple vulnerabilities have been discovered in Mailman. Please review the referenced CVE identifier for details. Impact Please review the referenced CVE identifiers for details. Workaround Ther...

openSUSE Security Update : mailman (openSUSE-2019-495)

This update for mailman to version 2.1.27 fixes the following issues : This security issue was fixed : - CVE-2018-0618: Additional protections against injecting scripts into listinfo and error messages pages bsc1099510. These non-security issues were fixed : - The hash generated when...