Red Hat Security AdvisoryRHSA-2006:0600
mailman security update
Released 2006-09-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 mailman-3:2.1.5.1-25.rhel3.7, mailman-3:2.1.5.1-25.rhel3.7.i386
- Red Hat Enterprise Linux AS version 3 mailman-3:2.1.5.1-25.rhel3.7, mailman-3:2.1.5.1-25.rhel3.7.i386, mailman-3:2.1.5.1-25.rhel3.7.ia64 +1
- Red Hat Enterprise Linux AS version 4 mailman-3:2.1.5.1-34.rhel4.5, mailman-3:2.1.5.1-34.rhel4.5.i386, mailman-3:2.1.5.1-34.rhel4.5.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 mailman-3:2.1.5.1-34.rhel4.5, mailman-3:2.1.5.1-34.rhel4.5.i386
- Red Hat Enterprise Linux ES version 3 mailman-3:2.1.5.1-25.rhel3.7, mailman-3:2.1.5.1-25.rhel3.7.i386, mailman-3:2.1.5.1-25.rhel3.7.ia64
- Red Hat Enterprise Linux ES version 4 mailman-3:2.1.5.1-34.rhel4.5, mailman-3:2.1.5.1-34.rhel4.5.i386, mailman-3:2.1.5.1-34.rhel4.5.ia64
- Red Hat Enterprise Linux WS version 3 mailman-3:2.1.5.1-25.rhel3.7, mailman-3:2.1.5.1-25.rhel3.7.i386, mailman-3:2.1.5.1-25.rhel3.7.ia64
- Red Hat Enterprise Linux WS version 4 mailman-3:2.1.5.1-34.rhel4.5, mailman-3:2.1.5.1-34.rhel4.5.i386, mailman-3:2.1.5.1-34.rhel4.5.ia64
Fixes 2 records
Priority MEDIUM 40
Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.06948 · Published 2006-09-06 · Fixed
Priority LOW 28
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers".
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02651 · Published 2006-09-06 · Fixed
