Red Hat Security AdvisoryRHSA-2011:0307
mailman security update
Released 2011-03-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5.6.z server) mailman-3:2.1.9-6.el5_6.1, mailman-3:2.1.9-6.el5_6.1.i386, mailman-3:2.1.9-6.el5_6.1.ia64 +1
- Red Hat Enterprise Linux AS version 4 mailman-3:2.1.5.1-34.rhel4.7, mailman-3:2.1.5.1-34.rhel4.7.i386, mailman-3:2.1.5.1-34.rhel4.7.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 mailman-3:2.1.5.1-34.rhel4.7, mailman-3:2.1.5.1-34.rhel4.7.i386
- Red Hat Enterprise Linux ES version 4 mailman-3:2.1.5.1-34.rhel4.7, mailman-3:2.1.5.1-34.rhel4.7.i386, mailman-3:2.1.5.1-34.rhel4.7.ia64
- Red Hat Enterprise Linux WS version 4 mailman-3:2.1.5.1-34.rhel4.7, mailman-3:2.1.5.1-34.rhel4.7.i386, mailman-3:2.1.5.1-34.rhel4.7.ia64
Fixes 3 records
Priority LOW 27
Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confi…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04248 · Published 2011-02-22 · Fixed CWE-79
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) editing templates and (2) the list's "in…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01919 · Published 2008-02-05 · Fixed CWE-79
Priority LOW 21
Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) the list information field or (2) the…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01973 · Published 2010-09-15 · Fixed CWE-79
THREATIST.IORead the docs