[SECURITY] [DSA 147-2] New mailman packages fix cross-site scripting problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 147-2 [email protected] http://www.debian.org/security/ Martin Schulze August 26th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 147-2] New mailman packages fix cross-site scripting problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 147-2 [email protected] http://www.debian.org/security/ Martin Schulze August 26th, 2002 http://www.debian.org/security/faq -...

security flaw

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the 1 adminpw or 2 info parameters to the ml-name feature...

Important: Red Hat Security Advisory: : Updated mailman packages close cross-site scripting vulnerability

Updated mailman packages are now available for Red Hat Power Tools 7 and 7.1. These updates close a cross-site scripting vulnerability present in mailman versions prior to version 2.0.12. Mailman versions prior to 2.0.12 contain a cross-site scripting vulnerability in the processing of invalid...

Important: Red Hat Security Advisory: : Updated mailman packages close cross-site scripting vulnerability

Updated mailman packages are now available for Red Hat Linux 7.2 and 7.3. These updates close a cross-site scripting vulnerability present in mailman versions prior to version 2.0.12. Mailman versions prior to 2.0.12 contain a cross-site scripting vulnerability in the processing of invalid reques...

CVE-2002-0855

Removed by vendor...

CVE-2002-0855

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the 1 adminpw or 2 info parameters to the ml-name feature...

CVE-2002-0855

CVE-2002-0855 describes a cross-site scripting vulnerability in Mailman prior to 2.0.12. Theissue allows remote attackers to execute script as other users by crafting a subscriber’s list subscription options in the ml-name feature via the (1) adminpw or (2) info parameters. Connected advisories c...

CVE-2002-0417

Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. dot dot and a null character in the ALTERNATETEMPLATES parameter for various mmstdo.cgi programs...

[SECURITY] [DSA 147-1] New mailman packages fix cross-site scripting problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 147-1 [email protected] http://www.debian.org/security/ Martin Schulze August 8th, 2002 - -------------------------------------------------------------------------- Package : mailman...

[SECURITY] [DSA 147-1] New mailman packages fix cross-site scripting problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 147-1 [email protected] http://www.debian.org/security/ Martin Schulze August 8th, 2002 - -------------------------------------------------------------------------- Package : mailman...

DSA-147 mailman - cross-site scripting

Bulletin has no description...

cross-site scripting bug of Mailman

Mailman: cross-site scripting bug Product: Mailman Affected Version: 2.0.11 and under it Vendor's URL: http://www.gnu.org/software/mailman/ Solution: Use fixed version 2.0.12 or later Introduction: ------------ Mailman is software to help manage electronic mail discussion lists, much like Majordo...

Crossite scripting in Mailman

Можно включить javascript в URL...

GNU Mailman 2.0.x - Subscribe Cross-Site Scripting

GNU Mailman 2.0.x - Subscribe Cross-Site Scripting source: https://www.securityfocus.com/bid/5298/info GNU Mailman is prone to a cross-site scripting vulnerability. Arbitrary HTML and script code are not sanitized from the URI parameters of mailing list subscribe scripts. An attacker may exploit...

GNU Mailman 2.0.x - Admin Login Variant Cross-Site Scripting

source: https://www.securityfocus.com/bid/5299/info GNU Mailman is prone to a cross-site scripting vulnerability. An attacker may construct a malicious link to the administrative login page, which contains arbitrary HTML and script code. A user visiting the link will have the attacker's script co...

GNU Mailman 2.0.x - Admin Login Variant Cross-Site Scripting

GNU Mailman 2.0.x - Admin Login Variant Cross-Site Scripting source: https://www.securityfocus.com/bid/5299/info GNU Mailman is prone to a cross-site scripting vulnerability. An attacker may construct a malicious link to the administrative login page, which contains arbitrary HTML and script code...

GNU Mailman 2.0.x - Subscribe Cross-Site Scripting

source: https://www.securityfocus.com/bid/5298/info GNU Mailman is prone to a cross-site scripting vulnerability. Arbitrary HTML and script code are not sanitized from the URI parameters of mailing list subscribe scripts. An attacker may exploit this issue by creating a malicious link containing...

Important: Red Hat Security Advisory: mailman security update

Updated mailman packages are now available for Red Hat Linux Advanced Server. These updates resolve a cross-site scripting vulnerability present in versions of Mailman prior to 2.0.11. Two cross-site scripting vulnerabilities have been discovered in versions of Mailman prior to version 2.0.11...

Important: Red Hat Security Advisory: : Updated mailman packages available

Updated mailman packages are now available for Red Hat Secure Web Server 3.2 U.S.. These updates resolve a cross-site scripting vulnerability present in versions of Mailman prior to 2.0.11. Two cross-site scripting vulnerabilities have been discovered in versions of Mailman prior to version 2.0.1...