CVE-2004-0412

Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server...

GNU Mailman Multiple Unspecified Remote Vulnerabilities

Binary data 2523.prm...

GNU Mailman < 2.1.8 Multiple Vulnerabilities

Binary data 3507.prm...

Mandrake Linux Security Advisory : mailman (MDKSA-2004:013)

A cross-site scripting vulnerability was discovered in mailman's administration interface CVE-2003-0965. This affects version 2.1 earlier than 2.1.4. Certain malformed email commands could cause the mailman process to crash. CVE-2003-0991. This affects version 2.0 earler than 2.0.14. Another...

Mandrake Linux Security Advisory : mailman (MDKSA-2004:051)

Mailman versions = 2.1 have an issue where 3rd parties can retrieve member passwords from the server. The updated packages have a patch backported from 2.1.5 to correct the issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Fedora Core 1 : mailman-2.1.4-1 (2004-060)

A cross-site scripting XSS vulnerability exists in the admin CGI script for Mailman before 2.1.4. This update moves Mailman to version 2.1.4 which is not vulnerable to this issue. Updated packages were made available in February 2004 however the original update notification email did not make it ...

Fedora Core 1 : mailman-2.1.5-6 (2004-167)

Fixes security issue CVE-2004-0412 noted in bug https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=123559 Mailman subscriber passwords could be retrieved by a remote attacker. Security hole is fixed in mailman-2.1.5 Important Installation Note: Some users have reported problems with bad queue...

Fedora Core 2 : mailman-2.1.5-7 (2004-168)

Fixes security issue CVE-2004-0412 noted in bug https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=123559 Mailman subscriber passwords could be retrieved by a remote attacker. Security hole is fixed in mailman-2.1.5 Important Installation Note: Some users have reported problems with bad queue...

FreeBSD : mailman XSS in user options page (102)

The following package needs to be updated: mailman %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg00263aa367a811d880e30020ed76ef5a.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : mailman (RHSA-2002:181)

Updated mailman packages are now available for Red Hat Linux Advanced Server. These updates close a cross-site scripting vulnerability present in mailman versions prior to version 2.0.12. Mailman versions prior to 2.0.12 contain a cross-site scripting vulnerability in the processing of invalid...

RHEL 2.1 : mailman (RHSA-2004:156)

An updated mailman package that closes a DoS vulnerability in mailman introduced by RHSA-2004:019 is now available. Mailman is a mailing list manager. On February 19 2004, Red Hat issued security erratum RHSA-2004:019 to correct a DoS Denial of Service vulnerability where an attacker could send a...

FreeBSD : mailman XSS in create script (103)

The following package needs to be updated: mailman %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg429249d267a711d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : mailman (RHSA-2002:125)

Updated mailman packages are now available for Red Hat Linux Advanced Server. These updates resolve a cross-site scripting vulnerability present in versions of Mailman prior to 2.0.11. Two cross-site scripting vulnerabilities have been discovered in versions of Mailman prior to version 2.0.11...

FreeBSD : mailman XSS in admin script (104)

The following package needs to be updated: mailman %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3cb88bb267a611d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : mailman (RHSA-2004:019)

Updated mailman packages that close a DoS vulnerability present in mailman versions prior to version 2.1 are now available. Mailman is a mailing list manager. Matthew Galgoci of Red Hat discovered a Denial of Service DoS vulnerability in versions of Mailman prior to 2.1. An attacker could send a...

[Full-Disclosure] [ GLSA 200406-04 ] Mailman: Member password disclosure vulnerability

Gentoo Linux Security Advisory GLSA 200406-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Mailman: Member password disclosure vulnerability

Background Mailman is a python-based mailing list server with an extensive web interface. Description Mailman contains an unspecified vulnerability in the handling of request emails. Impact By sending a carefully crafted email request to the mailman server an attacker could obtain member password...

CVE-2004-0412

Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server...

CVE-2004-0412

Removed by vendor...

CVE-2004-0412

Mailman prior to version 2.1.5 is affected by CVE-2004-0412. A crafted email request to the Mailman server can allow a remote attacker to obtain user passwords, per the description in multiple sources (Mailman password disclosure). The vulnerability stems from how password data could be disclosed...