Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

mailman: denial of service

Package(s):

mailman

CVE #(s):

CVE-2005-3573

Created:

December 2, 2005

Updated:

March 8, 2006

Description:

Scrubber.py in Mailman 2.1.4 - 2.1.6 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service.

Alerts:

Red Hat	RHSA-2006:0204-01	2006-03-07
Debian	DSA-955-1	2006-01-25
Ubuntu	USN-242-1	2006-01-16
Mandriva	MDKSA-2005:222	2005-12-02

(Log in to post comments)