Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu mailman 2.1b1 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2004-0412
Mailman prior to 2.1.5 allows remote malicious users to obtain user passwords via a crafted email request to the Mailman server.
Gnu Mailman 2.1b1Gnu Mailman 2.1.1Gnu Mailman 2.1.2Gnu Mailman 2.1Gnu Mailman 2.1.3Gnu Mailman 2.1.4
5
CVSSv2
CVE-2005-0202
Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and previous versions allows remote malicious users to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended ...
Gnu Mailman 2.1.4Gnu Mailman 2.1.5Gnu Mailman 2.1b1Gnu Mailman 2.1.2Gnu Mailman 2.1.3Gnu Mailman 2.1Gnu Mailman 2.1.1
6.8
CVSSv2
CVE-2006-3636
Multiple cross-site scripting (XSS) vulnerabilities in Mailman prior to 2.1.9rc1 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Gnu Mailman 2.1.1Gnu Mailman 2.1.7Gnu Mailman 2.1.8Gnu Mailman 2.1.2Gnu Mailman 2.1.3Gnu Mailman 2.1b1Gnu Mailman 2.1Gnu Mailman 2.1.5.8Gnu Mailman 2.1.6Gnu Mailman 2.1.4Gnu Mailman 2.1.5
5
CVSSv2
CVE-2006-2941
Mailman prior to 2.1.9rc1 allows remote malicious users to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers".
Gnu Mailman 2.1.1Gnu Mailman 2.1.7Gnu Mailman 2.1.8Gnu Mailman 2.1.4Gnu Mailman 2.1.5Gnu Mailman 2.1.2Gnu Mailman 2.1.3Gnu Mailman 2.1b1Gnu Mailman 2.1Gnu Mailman 2.1.5.8Gnu Mailman 2.1.6
7.5
CVSSv2
CVE-2004-1143
The password generation in mailman prior to 2.1.5 generates only 5 million unique passwords, which makes it easier for remote malicious users to guess passwords via a brute force attack.
Gnu Mailman 2.0.10Gnu Mailman 2.0.11Gnu Mailman 2.0.6Gnu Mailman 2.0.7Gnu Mailman 2.1.2Gnu Mailman 2.1.3Gnu Mailman 1.0Gnu Mailman 1.1Gnu Mailman 2.0.2Gnu Mailman 2.0.3Gnu Mailman 2.0Gnu Mailman 2.0.1Gnu Mailman 2.0.4Gnu Mailman 2.0.5Gnu Mailman 2.1Gnu Mailman 2.1.1Gnu Mailman 2.0.12Gnu Mailman 2.0.13Gnu Mailman 2.0.8Gnu Mailman 2.0.9Gnu Mailman 2.1.4Gnu Mailman 2.1b1
4.3
CVSSv2
CVE-2004-1177
Cross-site scripting (XSS) vulnerability in the driver script in mailman prior to 2.1.5 allows remote malicious users to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.
Gnu Mailman 2.0.12Gnu Mailman 2.0.13Gnu Mailman 2.0.8Gnu Mailman 2.0.9Gnu Mailman 2.1.4Gnu Mailman 2.1b1Gnu Mailman 2.0Gnu Mailman 2.0.1Gnu Mailman 2.0.4Gnu Mailman 2.0.5Gnu Mailman 2.1Gnu Mailman 2.1.1Gnu Mailman 2.0.10Gnu Mailman 2.0.11Gnu Mailman 2.0.6Gnu Mailman 2.0.7Gnu Mailman 2.1.2Gnu Mailman 2.1.3Gnu Mailman 1.0Gnu Mailman 1.1Gnu Mailman 2.0.2Gnu Mailman 2.0.3
5
CVSSv2
CVE-2006-0052
The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and previous versions, when using Python's library email module 2.5, allows remote malicious users to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two...
Gnu Mailman 1.1Gnu Mailman 2.0Gnu Mailman 2.0.1Gnu Mailman 2.0.3Gnu Mailman 2.0.4Gnu Mailman 1.0Gnu Mailman 2.0.14Gnu Mailman 2.0.2Gnu Mailman 2.0.9Gnu Mailman 2.1.4Gnu Mailman 2.1.5Gnu Mailman 2.1b1Gnu Mailman 2.0.10Gnu Mailman 2.0.11Gnu Mailman 2.0.5Gnu Mailman 2.0.6Gnu Mailman 2.1Gnu Mailman 2.1.1Gnu Mailman 2.0.12Gnu Mailman 2.0.13Gnu Mailman 2.0.7Gnu Mailman 2.0.8
4.3
CVSSv2
CVE-2011-0707
Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.
Gnu Mailman 2.1.13Gnu Mailman 2.1.5Gnu Mailman 2.1.11Gnu Mailman 2.0.5Gnu Mailman 2.0.1Gnu Mailman 2.1.5.8Gnu Mailman 2.1.3Gnu Mailman 2.0.11Gnu Mailman 2.0.6Gnu Mailman 2.0Gnu Mailman 2.1.8Gnu Mailman 1.1Gnu Mailman 2.0.14Gnu Mailman 2.0.12Gnu Mailman 2.1.2Gnu Mailman 2.0.9Gnu Mailman 2.1.9Gnu Mailman 2.0.3Gnu Mailman 2.1Gnu Mailman 2.1.14Gnu Mailman 2.0.13Gnu Mailman 2.1.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700CVE-2022-48689CVE-2024-27956CVE-2023-6363SQLNULL pointer dereferenceCVE-2023-41830CVE-2015-2051arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook