mailman: several vulnerabilities [LWN.net]

Package(s):

mailman

CVE #(s):

CVE-2006-2941 CVE-2006-3636

Created:

September 8, 2006

Updated:

October 23, 2006

Description:

A flaw was found in the way Mailman handled MIME multipart messages. An attacker could send a carefully crafted MIME multipart email message to a mailing list run by Mailman which caused that particular mailing list to stop working. (CVE-2006-2941)

Several cross-site scripting (XSS) issues were found in Mailman. An attacker could exploit these issues to perform cross-site scripting attacks against the Mailman administrator. (CVE-2006-3636)

Alerts:

Fedora	FEDORA-2006-1013	2006-10-23
Debian	DSA-1188-1	2006-10-04
Gentoo	200609-12	2006-09-19
Mandriva	MDKSA-2006:165	2006-09-18
Ubuntu	USN-345-1	2006-09-13
rPath	rPSA-2006-0165-1	2006-09-08
Red Hat	RHSA-2006:0600-01	2006-09-06

(Log in to post comments)