1505 matches found
CVE-2006-4624
CVE-2006-4624 describes a CRLF injection in Mailman’s Utils.py (pre-2.1.9rc1) that can let a remote attacker spoof entries in the error log and potentially mislead an administrator into visiting malicious URLs via carriage return/line feed sequences in the URI. Connected advisories confirm this v...
CVE-2006-4624
CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the error log and possibly trick the administrator into visiting malicious URLs via CRLF sequences in the URI...
CVE-2006-4624
Removed by vendor...
security flaw
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers"...
Moderate: Red Hat Security Advisory: mailman security update
Updated mailman packages that fix security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mailman is a program used to help manage email discussion lists. A flaw was found in the w...
security flaw
Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Design/Logic Flaw
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers"...
CVE-2006-3636
Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-2941
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers"...
CVE-2006-3636
Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-2941
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers"...
CVE-2006-3636
Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-2941
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers"...
CVE-2006-3636
CVE-2006-3636 corresponds to multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman. The initial entry cites Mailman versions before 2.1.9rc1 as vulnerable via unspecified vectors, enabling remote attackers to inject arbitrary script/HTML. Connected documents corroborate this family o...
CVE-2006-2941
Mailman vulnerability CVE-2006-2941 affects Mailman prior to 2.1.9rc1, involving how RFC 2231 formatted headers are processed. Exploitation can lead to a denial of service on mailing lists. Connected advisories (Red Hat RHSA-2006:0600, Ubuntu USN-345-1, SuSE/SLES9 updates, Gentoo GLSA 200609-12, ...
CVE-2006-2941
Removed by vendor...
CVE-2006-3636
Removed by vendor...
Mailman Utils.py Spoofed Log Entry Injection
The version of Mailman installed on the remote host fails to sanitize user-supplied input before writing it to the application's 'error' log. An unauthenticated, remote attacker can leverage this flaw to spoof log messages. In addition, the application reportedly is affected by a denial of servic...
FreeBSD : mailman -- Multiple Vulnerabilities (fffa9257-3c17-11db-86ab-00123ffe8333)
Secunia reports : Mailman can be exploited by malicious people to conduct cross-site scripting and phishing attacks, and cause a DoS Denial of Service. 1 An error in the logging functionality can be exploited to inject a spoofed log message into the error log via a specially crafted URL. Successf...