Mailman 2.1.x Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/20021/info Mailman is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-input. These issues include multiple cross-site scripting vulnerabilities and a CRLF-injection...

GNU Mailman 2.0.x Admin Login Variant Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5299/info GNU Mailman is prone to a cross-site scripting vulnerability. An attacker may construct a malicious link to the administrative login page, which contains arbitrary HTML and script code. A user visiting the link...

GNU Mailman 2.1 Error Page Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6678/info A vulnerability has been discovered in GNU Mailman. The issue occurs to insufficient sanitization of user-supplied data which is output when generating error pages. As a result, attackers may embed malicious...

Endymion MailMan 3.0..x Remote Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2063/info A vulnerability exists in 3.x versions of Endymion MailMan Webmail prior to release 3.0.26. The widely-used Perl script provides a web-email interface. Affected versions make insecure use of the perl open...

openSUSE Security Update : mailman (openSUSE-SU-2011:0312-1)

mailman was updates to version 2.1.14 to fix several cross-site-scripting XSS vulnerabilities CVE-2011-0707, CVE-2010-3089. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mailman-4271. The te...

openSUSE Security Update : mailman (openSUSE-SU-2012:0660-1)

local users could read mailman's mail archive %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-298. The text description of this plugin is C SUSE LLC...

Oracle Linux 3 / 4 : mailman (ELSA-2006-0600)

From Red Hat Security Advisory 2006:0600 : Updated mailman packages that fix security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is a program used to help manage email...

Oracle Linux 6 : mailman (ELSA-2011-0308)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-0308 advisory. 3:2.1.12-14.2 - fix 677848 - fixed build problem without brew 3:2.1.12-14.1 - fix 677848 - fixed CVE-2010-3089 and CVE-2011-0707 Tenable has extracted...

Oracle Linux 5 : mailman (ELSA-2011-0307)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-0307 advisory. 3:2.1.9-6.1 - fix 677845 - fixed CVE-2008-0564, CVE-2010-3089 and CVE-2011-0707 Tenable has extracted the preceding description block directly from the...

CentOS 4 : mailman (CESA-2007:0779)

Updated mailman packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Mailman is a program used to help manage email discussion lists. A flaw was found i...

Security fix for the ALT Linux 9 package mailman version 5:2.1.15-alt0.2

Oct. 17, 2012 Konstantin Lepikhov 5:2.1.15-alt0.2 - New upstream release 2.1.15. - Security fixes: + CVE-2011-0707, + many fixes in web interface against XSS attacks, + web admin interface has been hardened against CSRF attacks. - Re-merge debian patches...

Fedora Core 3 : mailman-2.1.5-30.fc3 (2005-132)

There is a critical security flaw in Mailman 2.1.5 which will allow attackers to read arbitrary files. The extent of the vulnerability depends on what version of Apache httpd you are running, and possibly how you have configured your web server. It is believed the vulnerability is not available...

Fedora Core 2 : mailman-2.1.5-8.fc2 (2005-131)

There is a critical security flaw in Mailman 2.1.5 which will allow attackers to read arbitrary files. The extent of the vulnerability depends on what version of Apache httpd you are running, and possibly how you have configured your web server. It is believed the vulnerability is not available...

Scientific Linux Security Update : mailman on SL6.x i386/x86_64

Multiple input sanitization flaws were found in the way Mailman displayed usernames of subscribed users on certain pages. If a user who is subscribed to a mailing list were able to trick a victim into visiting one of those pages, they could perform a cross-site scripting XSS attack against the...

Scientific Linux Security Update : mailman on SL4.x i386/x86_64

A flaw was found in Mailman. A remote attacker could spoof messages in the error log, and possibly trick the administrator into visiting malicious URLs via a carriage return/line feed sequence in the URI. CVE-2006-4624 As well, these updated packages fix the following bugs : - canceling a...

Scientific Linux Security Update : mailman on SL4.x, SL5.x i386/x86_64

Multiple input sanitization flaws were found in the way Mailman displayed usernames of subscribed users on certain pages. If a user who is subscribed to a mailing list were able to trick a victim into visiting one of those pages, they could perform a cross-site scripting XSS attack against the...

CentOS Update for mailman CESA-2011:0307 centos5 x86_64

Check for the Version of mailman OpenVAS Vulnerability Test CentOS Update for mailman CESA-2011:0307 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for mailman CESA-2011:0307 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for mailman RHSA-2011:0308-01

Check for the Version of mailman OpenVAS Vulnerability Test RedHat Update for mailman RHSA-2011:0308-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for mailman RHSA-2011:0308-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...