openSUSE: Security Advisory for mailman (openSUSE-SU-2018:1858-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2018-8974

Name of the Vulnerable Software and Affected Versions Mailman versions 2.1.26 and earlier Description The issue allows remote authenticated attackers to inject arbitrary web script or HTML. Recommendations For Mailman versions 2.1.26 and earlier, update to a version later than 2.1.26 to resolve t...

CVE-2018-0618

A cross-site scripting vulnerability XSS has been discovered in mailman due to the hostname field not being properly validated. A malicious list owner could use this flaw to create a specially crafted list and inject client-side scripts...

Mailman vulnerable to cross-site scripting

Overview Mailman provided by GNU Mailman contains a stored cross-site scripting vulnerability CWE-79. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

Mailman cross-site scripting vulnerability (CNVD-2018-15739)

GNU Mailman is a free suite of software from the GNU Project for managing e-mail discussions and e-mail lists. The software can be integrated with Web projects to make it easy for users to manage email subscription accounts and provides built-in archiving, automatic forwarding processing, content...

JVN#00846677: Mailman vulnerable to cross-site scripting

Mailman provided by GNU Mailman contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the developer. Products Affected...

FreeBSD : mailman -- hardening against malicious listowners injecting evil HTML scripts (739948e3-78bf-11e8-b23c-080027ac955c)

Mark Sapiro reports : Existing protections against malicious listowners injecting evil scripts into listinfo pages have had a few more checks added. A few more error messages have had their values HTML escaped. The hash generated when SUBSCRIBEFORMSECRET is set could have been the same as one...

SUSE SLES11 Security Update : mailman (SUSE-SU-2018:1638-1)

This update for mailman to version 2.1.15 fixes the following issues : - CVE-2016-6893: Prevent cross-site request forgery CSRF vulnerability in the user options page that allowed remote attackers to hijack the authentication of arbitrary users for requests that modify an option bsc995352. -...

SUSE-SU-2018:1638-1 Security update for mailman

This update for mailman to version 2.1.15 fixes the following issues: - CVE-2016-6893: Prevent cross-site request forgery CSRF vulnerability in the user options page that allowed remote attackers to hijack the authentication of arbitrary users for requests that modify an option bsc995352. - Vario...

EulerOS 2.0 SP2 : mailman (EulerOS-SA-2018-1087)

According to the versions of the mailman package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each...

EulerOS 2.0 SP1 : mailman (EulerOS-SA-2018-1086)

According to the versions of the mailman package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each...

Amazon Linux 2 : mailman (ALAS-2018-985)

Cross-site scripting XSS vulnerability in web UI A cross-site scripting XSS flaw was found in mailman. An attacker, able to trick the user into visiting a specific URL, can execute arbitrary web scripts on the user's side and force the victim to perform unintended actions. CVE-2018-5950 C Tenable...

[SECURITY] Fedora 28 Update: mailman-2.1.26-1.fc28

Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a webpage, and allows users to subscribe, unsubscribe, etc. over the Web. Even the list manager can administer his or her list entirely from...

Amazon Linux AMI : mailman (ALAS-2018-985)

Cross-site scripting XSS vulnerability in web UI A cross-site scripting XSS flaw was found in mailman. An attacker, able to trick the user into visiting a specific URL, can execute arbitrary web scripts on the user's side and force the victim to perform unintended actions. CVE-2018-5950 CSRF...

Medium: mailman

Issue Overview: Cross-site scripting XSS vulnerability in web UI A cross-site scripting XSS flaw was found in mailman. An attacker, able to trick the user into visiting a specific URL, can execute arbitrary web scripts on the user's side and force the victim to perform unintended actions...

Medium: mailman

Issue Overview: Cross-site scripting XSS vulnerability in web UI A cross-site scripting XSS flaw was found in mailman. An attacker, able to trick the user into visiting a specific URL, can execute arbitrary web scripts on the user's side and force the victim to perform unintended actions...

MGASA-2018-0184 Updated mailman packages fix a security vulnerability

Updated mailman package fixes security vulnerability: Calum Hutton and the Mailman team discovered a cross site scripting and information leak vulnerability in the user options page. A remote attacker could use a crafted URL to steal cookie information or to fish for whether a user is subscribed ...

Updated mailman packages fix a security vulnerability

Updated mailman package fixes security vulnerability: Calum Hutton and the Mailman team discovered a cross site scripting and information leak vulnerability in the user options page. A remote attacker could use a crafted URL to steal cookie information or to fish for whether a user is subscribed ...

openSUSE Security Update : mailman (openSUSE-2018-304)

This update for mailman fixes the following issues : Security issue fixed : - CVE-2018-5950: Fixed XSS vulnerability via crafted URL that could allow arbitrary JavaScript execution inside the user's browser boo1077358. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Fedora 27 : 3:mailman (2018-55b7018374)

Fix for CVE-2016-6893 ---- Security fix for CVE-2018-5950 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...