Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-4624
HistorySep 07, 2006 - 12:00 a.m.

CVE-2006-4624

2006-09-0700:00:00
ubuntu.com
ubuntu.com
10

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.016 Low

EPSS

Percentile

87.5%

CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows
remote attackers to spoof messages in the error log and possibly trick the
administrator into visiting malicious URLs via CRLF sequences in the URI.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmailman< 2.1.5-9ubuntu4.1UNKNOWN
ubuntu6.10noarchmailman< 2.1.8-2ubuntu2UNKNOWN
ubuntu7.04noarchmailman< 2.1.8-2ubuntu2UNKNOWN

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.016 Low

EPSS

Percentile

87.5%