mailman: error log spoof
| Package(s): | mailman | CVE #(s): | CVE-2006-4624 | ||||
| Created: | November 15, 2007 | Updated: | November 21, 2007 | ||||
| Description: | The Mailman mailing list manager is vulnerable to log file spoofing. A remote attacker can insert carriage return/line feed sequences, causing invalid error log messages to be recorded. This makes it possible to trick the administrator into visiting malicious URLs. | ||||||
| Alerts: |
| ||||||