1505 matches found
SuSE 10 Security Update : mailman (ZYPP Patch Number 2174)
This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...
mailman security and bug fix update
2.1.5.1-34.rhel4.6 - fix 200036 - canceling subscription confirmation crashes mailman - fix 205651 - CVE-2006-4624 logfile CRLF injection - fix 230939 - missing migrate-fhs script - fix 223191 - spam filters gets deleted when sender filter is edited - fix 242677 - wrong init script...
RHEL 4 : mailman (RHSA-2007:0779)
Updated mailman packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Mailman is a program used to help manage email discussion lists. A flaw was found i...
mailman security update
CentOS Errata and Security Advisory CESA-2007:0775 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2007-November/076593.html Affected packages: mailman Upstream details at: https://access.redhat.com/errata/RHSA-2007:0775...
mailman security update
CentOS Errata and Security Advisory CESA-2007:0779 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2007-November/076585.html Affected packages: mailman Upstream details at: https://access.redhat.com/errata/RHSA-2007:0775...
Low: Red Hat Security Advisory: mailman security and bug fix update
Updated mailman packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Mailman is a program used to help manage email discussion lists. A flaw was found i...
mailman logfile CRLF injection
CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the error log and possibly trick the administrator into visiting malicious URLs via CRLF sequences in the URI...
Ubuntu 5.04 / 5.10 / 6.06 LTS : mailman vulnerabilities (USN-345-1)
Steve Alexander discovered that mailman did not properly handle attachments with special filenames. A remote user could exploit that to stop mail delivery until the server administrator manually cleaned these posts. CVE-2006-2941 Various cross-site scripting vulnerabilities have been reported by...
openSUSE 10 Security Update : mailman (mailman-2170)
This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...
Fedora Core 5 : mailman-2.1.8-0.FC5.1 (2006-535)
version 2.1.8 fixes various security issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Core 5 : mailman-2.1.9-0.fc5.1 (2006-1013)
This new release fixes a lot of security holes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Core 4 : mailman-2.1.8-0.FC4.1 (2006-534)
version 2.1.8 fixes various security issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Mandrake Linux Security Advisory : mailman (MDKSA-2006:165)
A flaw was discovered in how Mailman handles MIME multipart messages where an attacker could send a carefully-crafted MIME multipart message to a Mailman-run mailing list causing that mailing list to stop working CVE-2006-2941. As well, a number of XSS cross-site scripting issues were discovered...
Moderate mailman security update
3:2.1.5.1-34.rhel4.5 - fixed CVE-2006-3636 bug 198344 3:2.1.5.1-34.rhel4.4 - added patches to fix CVE-2006-2941 bug 198344...
GNU Mailman跨站脚本及拒绝服务漏洞
GNU Mailman是一款开放源码的邮件列表管理系统。 Mailman中存在多个安全漏洞，具体如下： 1 日志功能中的错误允许攻击者通过特制的URL向错误日志中注入欺骗性的日志消息。这可能诱骗管理员访问恶意的Web站点。 2 Mailman在处理畸形MIME首部时没有遵循RFC 2231标准，可能导致拒绝服务。 3 Mailman没有正确过滤某些用户输入，允许在用户浏览器会话中执行任意HTML和脚本代码。 受影响系统： GNU Mailman 2.1.9 不受影响系统： GNU Mailman 2.1.9rc1 GNU Mailman 2.1.9 厂商补丁： GNU ---...
Debian DSA-1188-1 : mailman - format string
Several security related problems have been discovered in mailman, the web-based GNU mailing list manager. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-3636 Moritz Naumann discovered several cross-site scripting problems that could allow remote...
Debian DSA-1027-1 : mailman - programming error
A potential denial of service problem has been discovered in mailman, the web-based GNU mailing list manager. The failing parsing of messages with malformed mime multiparts sometimes caused the whole mailing list to become inoperative. The old stable distribution woody is not vulnerable to this...
Debian DSA-955-1 : mailman - DoS
Two denial of service bugs were found in the mailman list server. In one, attachment filenames containing UTF8 strings were not properly parsed, which could cause the server to crash. In another, a message containing a bad date string could cause a server crash. The old stable distribution woody ...
[SECURITY] [DSA 1188-1] New mailman packages fix several problems
-------------------------------------------------------------------------- Debian Security Advisory DSA 1188-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2006 http://www.debian.org/security/faq -...
