Several security related problems have been discovered in mailman, the web-based GNU mailing list manager. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-3636 Moritz Naumann discovered several cross-site scripting problems that could allow remote attackers to inject arbitrary web script code or HTML. CVE-2006-4624 Moritz Naumann discovered that a remote attacker can inject arbitrary strings into the logfile. For the stable distribution (sarge) these problems have been fixed in version 2.1.5-8sarge5. For the unstable distribution (sid) these problems have been fixed in version 2.1.8-3. We recommend that you upgrade your mailman package.
Several security related problems have been discovered in mailman, the web-based GNU mailing list manager. The Common Vulnerabilities and Exposures project identifies the following problems:
Moritz Naumann discovered several cross-site scripting problems that could allow remote attackers to inject arbitrary web script code or HTML.
Moritz Naumann discovered that a remote attacker can inject arbitrary strings into the logfile.
For the stable distribution (sarge) these problems have been fixed in version 2.1.5-8sarge5.
For the unstable distribution (sid) these problems have been fixed in version 2.1.8-3.
We recommend that you upgrade your mailman package.
MD5 checksums of the listed files are available in the original advisory.