1505 matches found
[SA17511] Mailman Attachment Filename Scrubbing Denial of Service
TITLE: Mailman Attachment Filename Scrubbing Denial of Service SECUNIA ADVISORY ID: SA17511 VERIFY ADVISORY: http://secunia.com/advisories/17511/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Mailman 2.x http://secunia.com/product/1010/ DESCRIPTION: Aliet Santiesteban...
Mailman Detection
This script detects whether the remote host is running Mailman and extracts version numbers and locations of any instances found. Mailman is a Python-based mailing list management package from the GNU Project. See http://www.list.org/ for more information. OpenVAS Vulnerability Test $Id:...
Mailman < 2.1.5 Password Retrieval Vulnerability
Mailman is prone to a password retrieval vulnerability. SPDX-FileCopyrightText: 2004-2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gnu:mailman";...
Mailman Detection (HTTP)
HTTP based detection of Mailman. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.16338";...
Mailman < 2.1.6b1 Directory Traversal Vulnerability
Mailman is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gnu:mailman";...
Mailman Password Retrieval
The target is running version of the Mailman mailing list software that allows a list subscriber to retrieve the mailman password of any other subscriber by means of a specially crafted mail message to the server. That is, a message sent to $listname-request@$target containing the lines : passwor...
Mailman private.py Directory Traversal Vulnerability
Authenticated Mailman users can view arbitrary files on the remote host. Description : According to its version number, the remote installation of Mailman reportedly is prone to a directory traversal vulnerability in 'Cgi/private.py'. The flaw comes into play only on web servers that don't strip...
Fedora Core 3 : mailman-2.1.5-32.fc3 (2005-242)
A cross-site scripting XSS flaw in the driver script of mailman prior to version 2.1.5 could allow remote attackers to execute scripts as other web users. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-1177 to this issue. Users of mailman should upda...
FreeBSD : mailman -- password disclosure (ad9d2518-3471-4737-b60b-9a1f51023b28)
Barry Warsaw reports : Today I am releasing Mailman 2.1.5, a bug fix release ... This version also contains a fix for an exploit that could allow 3rd parties to retrieve member passwords. It is thus highly recommended that all existing sites upgrade to the latest version. %NASLMINLEVEL 70300 C...
FreeBSD : mailman (1493)
The following package needs to be updated: mailman %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF,...
FreeBSD : mailman -- directory traversal vulnerability (c7ccc33f-7d31-11d9-a9e7-0001020eed82)
A directory traversal vulnerability in mailman allow remote attackers to read arbitrary files due to inadequate input sanitizing. This could, among other things, lead remote attackers to gaining access to the mailman configuration database which contains subscriber email addresses and passwords o...
FreeBSD : mailman -- generated passwords are poor quality (b3cd00f7-c0c5-452d-87bc-086c5635333e)
Florian Weimer wrote : Mailman 2.1.5 uses weak auto-generated passwords for new subscribers. These passwords are assigned when members subscribe without specifying their own password either by email or the web frontend. Knowledge of this password allows an attacker to gain access to the list...
Fedora Core 2 : mailman-2.1.5-10.fc2 (2005-241)
A cross-site scripting XSS flaw in the driver script of mailman prior to version 2.1.5 could allow remote attackers to execute scripts as other web users. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-1177 to this issue. Users of mailman should upda...
CVE-2005-0080
The 55optionstraceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address...
CVE-2005-0080
The 55optionstraceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address...
CVE-2005-0202
Directory traversal vulnerability in the truepath function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences...
CVE-2005-0202
Directory traversal vulnerability in the truepath function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences...
Endymion MailMan Detection
Binary data 2742.prm...
Important: Red Hat Security Advisory: mailman security update
An updated mailman package that corrects a cross-site scripting flaw is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Mailman manages electronic mail discussion and e-newsletter lists. A cross-site scripting XSS flaw in the...
security flaw
Cross-site scripting XSS vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page...