Red Hat Security AdvisoryRHSA-2006:0204
mailman security update
Released 2006-03-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 mailman-3:2.1.5.1-25.rhel3.4, mailman-3:2.1.5.1-25.rhel3.4.i386
- Red Hat Enterprise Linux AS version 3 mailman-3:2.1.5.1-25.rhel3.4, mailman-3:2.1.5.1-25.rhel3.4.i386, mailman-3:2.1.5.1-25.rhel3.4.ia64 +1
- Red Hat Enterprise Linux AS version 4 mailman-3:2.1.5.1-34.rhel4.2, mailman-3:2.1.5.1-34.rhel4.2.i386, mailman-3:2.1.5.1-34.rhel4.2.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 mailman-3:2.1.5.1-34.rhel4.2, mailman-3:2.1.5.1-34.rhel4.2.i386
- Red Hat Enterprise Linux ES version 3 mailman-3:2.1.5.1-25.rhel3.4, mailman-3:2.1.5.1-25.rhel3.4.i386, mailman-3:2.1.5.1-25.rhel3.4.ia64
- Red Hat Enterprise Linux ES version 4 mailman-3:2.1.5.1-34.rhel4.2, mailman-3:2.1.5.1-34.rhel4.2.i386, mailman-3:2.1.5.1-34.rhel4.2.ia64
- Red Hat Enterprise Linux WS version 3 mailman-3:2.1.5.1-25.rhel3.4, mailman-3:2.1.5.1-25.rhel3.4.i386, mailman-3:2.1.5.1-25.rhel3.4.ia64
- Red Hat Enterprise Linux WS version 4 mailman-3:2.1.5.1-34.rhel4.2, mailman-3:2.1.5.1-34.rhel4.2.i386, mailman-3:2.1.5.1-34.rhel4.2.ia64
Fixes 2 records
Priority MEDIUM 40
Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03072 · Published 2005-12-11 · Fixed
Priority LOW 28
Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02714 · Published 2005-11-16 · Fixed
