1505 matches found
DSA-955-1 mailman - DoS
Bulletin has no description...
Ubuntu 4.10 / 5.04 / 5.10 : mailman vulnerabilities (USN-242-1)
Aliet Santiesteban Sifontes discovered a remote Denial of Service vulnerability in the attachment handler. An email with an attachment whose filename contained invalid UTF-8 characters caused mailman to crash. CVE-2005-3573 Mailman did not sufficiently verify the validity of email dates. Very lar...
USN-242-1: mailman vulnerabilities
Aliet Santiesteban Sifontes discovered a remote Denial of Service vulnerability in the attachment handler. An email with an attachment whose filename contained invalid UTF-8 characters caused mailman to crash. CVE-2005-3573 Mailman did not sufficiently verify the validity of email dates. Very lar...
[Full-disclosure] [USN-242-1] mailman vulnerabilities
=========================================================== Ubuntu Security Notice USN-242-1 January 16, 2006 mailman vulnerabilities CVE-2005-3573, CVE-2005-4153 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty...
mailman mailing lists processor DoS
Scrubber.py fails to process attachment with UTF-8 character in the name and messages with large numbers in dates...
Ubuntu 4.10 : mailman vulnerabilities (USN-78-2)
Ubuntu Security Announce USN-78-1 described a path traversal vulnerability in the 'private' module of Mailman. Unfortunately this updated mailman package was broken so that the 'private' module could not be executed at all any more. The latest package version fixes this. We apologize for the...
Ubuntu 4.10 : mailman vulnerabilities (USN-78-1)
An path traversal vulnerability has been discovered in the 'private' module of Mailman. A flawed path sanitation algorithm allowed the construction of URLS to arbitrary files readable by Mailman. This allowed a remote attacker to retrieve configuration and password databases, private list archive...
Ubuntu 4.10 : mailman vulnerabilities (USN-59-1)
Florian Weimer discovered a cross-site scripting vulnerability in mailman's automatically generated error messages. An attacker could craft an URL containing JavaScript or other content embedded into HTML which triggered a mailman error page. When an unsuspecting user followed this URL, the...
Mandrake Linux Security Advisory : mailman (MDKSA-2005:222)
Scrubber.py in Mailman 2.1.4 - 2.1.6 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service. CVE-2005-3573 In addition, these versions of mailman have an issue where the server will fail with an Overflow on...
CVE-2005-4153
Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE-2005-3573...
CVE-2005-4153
Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE-2005-3573...
CVE-2005-4153
Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE-2005-3573...
CVE-2005-4153
CVE-2005-4153 affects Mailman 2.1.4–2.1.6, where a crafted message with bad date data could crash the Mailman server (remote DoS). Root cause: improper handling of date data in processed messages. Exploitation details are not provided in the included documents. Remediation in connected advisories...
CVE-2005-4153
Removed by vendor...
CVE-2005-3573
Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service application crash...
CVE-2005-3573
Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service application crash...
CVE-2005-3573
Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service application crash...
CVE-2005-3573
CVE-2005-3573 affects Mailman 2.1.4–2.1.6 with two DoS vectors: (1) UTF-8 handling in attachment filenames can crash the server, and (2) malformed date handling can crash the Mailman service. Connected advisories (RHSA-2006:0204, Debian DSA-955-1, CentOS/CESA-2006:0204) document these issues and ...
CVE-2005-3573
Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service application crash...