1493 matches found
Ubuntu 14.04 LTS / 16.04 LTS : Mailman vulnerabilities (USN-3118-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3118-1 advisory. It was discovered that the Mailman administrative web interface did not protect against cross-site request forgery CSRF attacks. If an...
USN-3118-1 mailman vulnerabilities
It was discovered that the Mailman administrative web interface did not protect against cross-site request forgery CSRF attacks. If an authenticated user were tricked into visiting a malicious website while logged into Mailman, a remote attacker could perform administrative actions. This issue on...
USN-3118-1: Mailman vulnerabilities
It was discovered that the Mailman administrative web interface did not protect against cross-site request forgery CSRF attacks. If an authenticated user were tricked into visiting a malicious website while logged into Mailman, a remote attacker could perform administrative actions. This issue on...
Updated mailman package fixes security vulnerability
Cross-site request forgery CSRF vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account...
MGASA-2016-0343 Updated mailman package fixes security vulnerability
Cross-site request forgery CSRF vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account...
Security fix for the ALT Linux 9 package mailman version 5:2.1.23-alt0.1.20160915
Sept. 24, 2016 Konstantin Lepikhov 5:2.1.23-alt0.1.20160915 - LP shapshot 20160916. - Security fixes: + CVE-2016-6893: Extend CSRF protection to user options page...
Debian DSA-3668-1 : mailman - security update
It was discovered that there was a CSRF vulnerability in mailman, a web-based mailing list manager, which could allow an attacker to obtain a user's password. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
[SECURITY] [DSA 3668-1] mailman security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3668-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst September 15, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3668-1 (mailman - security update)
It was discovered that there was a CSRF vulnerability in mailman, a web-based mailing list manager, which could allow an attacker to obtain a user OpenVAS Vulnerability Test $Id: deb3668.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3668-1 using nvtgen 1.0 Script...
DSA-3668-1 mailman - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3668-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : mailman -- CSRF hardening in parts of the web interface (9e50dcc3-740b-11e6-94a2-080027ef73ec)
The late Tokio Kikuchi reported : We may have to set lifetime for input forms because of recent activities on cross-site request forgery CSRF. The form lifetime is successfully deployed in frameworks like web.py or plone etc. Proposed branch lp:tkikuchi/mailman/form-lifetime implement lifetime in...
The vulnerability of the GNU Mailman mailing system allows a hacker to replace a user during an administrator session.
The vulnerability in the GNU Mailman mailing system’s web interface is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to replace the user during an administrator session...
The vulnerability of the GNU Mailman mailing system allows a hacker to gain access to the authentication data of arbitrary users.
The vulnerability of the GNU Mailman system’s user configuration page relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to remotely access the authentication data of arbitrary users through modified requests. As a result, the access to the...
Debian DLA-608-1 : mailman security update
It was discovered that there was a CSRF vulnerability in mailman, a web-based mailing list manager, which could allow an attacker to obtain a user's password. For Debian 7 'Wheezy', this issue has been fixed in mailman version 1:2.1.15-1+deb7u2. We recommend that you upgrade your mailman packages...
CVE-2016-7123
Cross-site request forgery CSRF vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators...
GNU Mailman Cross-Site Request Forgery Vulnerability
GNU Mailman is a software application used by the GNU Project to manage e-mail lists. The GNU Mailman cross-site request forgery vulnerability, which arises due to a failure to properly validate HTTP requests, allows remote attackers to exploit the vulnerability to perform certain unauthorized...
GNU Mailman Cross-Site Request Forgery Vulnerability (CNVD-2016-07106)
GNU Mailman is a software application used by the GNU Project to manage e-mail lists. The GNU Mailman cross-site request forgery vulnerability, which arises due to a failure to properly validate HTTP requests, allows remote attackers to exploit the vulnerability to perform certain unauthorized...
