Red Hat Security AdvisoryRHSA-2006:0486
mailman security update
Released 2006-06-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 mailman-3:2.1.5.1-25.rhel3.5, mailman-3:2.1.5.1-25.rhel3.5.i386
- Red Hat Enterprise Linux AS version 3 mailman-3:2.1.5.1-25.rhel3.5, mailman-3:2.1.5.1-25.rhel3.5.i386, mailman-3:2.1.5.1-25.rhel3.5.ia64 +1
- Red Hat Enterprise Linux AS version 4 mailman-3:2.1.5.1-34.rhel4.3, mailman-3:2.1.5.1-34.rhel4.3.i386, mailman-3:2.1.5.1-34.rhel4.3.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 mailman-3:2.1.5.1-34.rhel4.3, mailman-3:2.1.5.1-34.rhel4.3.i386
- Red Hat Enterprise Linux ES version 3 mailman-3:2.1.5.1-25.rhel3.5, mailman-3:2.1.5.1-25.rhel3.5.i386, mailman-3:2.1.5.1-25.rhel3.5.ia64
- Red Hat Enterprise Linux ES version 4 mailman-3:2.1.5.1-34.rhel4.3, mailman-3:2.1.5.1-34.rhel4.3.i386, mailman-3:2.1.5.1-34.rhel4.3.ia64
- Red Hat Enterprise Linux WS version 3 mailman-3:2.1.5.1-25.rhel3.5, mailman-3:2.1.5.1-25.rhel3.5.i386, mailman-3:2.1.5.1-25.rhel3.5.ia64
- Red Hat Enterprise Linux WS version 4 mailman-3:2.1.5.1-34.rhel4.3, mailman-3:2.1.5.1-34.rhel4.3.i386, mailman-3:2.1.5.1-34.rhel4.3.ia64
Fixes 1 record
Priority LOW 28
The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02698 · Published 2006-03-31 · Fixed
