Published: 31/03/2006 Updated: 03/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and previous versions, when using Python's library email module 2.5, allows remote malicious users to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu mailman 1.1
gnu mailman 2.0
gnu mailman 2.0.1
gnu mailman 2.0.3
gnu mailman 2.0.4
gnu mailman 1.0
gnu mailman 2.0.14
gnu mailman 2.0.2
gnu mailman 2.0.9
gnu mailman 2.1.4
gnu mailman 2.1.5
gnu mailman 2.1b1
gnu mailman 2.0.10
gnu mailman 2.0.11
gnu mailman 2.0.5
gnu mailman 2.0.6
gnu mailman 2.1
gnu mailman 2.1.1
gnu mailman 2.0.12
gnu mailman 2.0.13
gnu mailman 2.0.7
gnu mailman 2.0.8
gnu mailman 2.1.2
gnu mailman 2.1.3

Debian Bug report logs - #358892 Uncaught runner exception: len() of unsized object Package: mailman; Maintainer for mailman is Mailman for Debian <pkg-mailman-hackers@listsaliothdebianorg>; Source for mailman is src:mailman (PTS, buildd, popcon) Reported by: Sven Hartge <sven@svenhartgede> Date: Sat, 25 Mar 2006 ...

A remote Denial of Service vulnerability was discovered in the decoder for multipart messages Certain parts of type “message/delivery-status” or parts containing only two blank lines triggered an exception An attacker could exploit this to crash Mailman by sending a specially crafted email to a mailing list ...

A potential denial of service problem has been discovered in mailman, the web-based GNU mailing list manager The (failing) parsing of messages with malformed mime multiparts sometimes caused the whole mailing list to become inoperative The old stable distribution (woody) is not vulnerable to this issue For the stable distribution (sarge) this pr ...

NVD-CWE-Other http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=358892 http://www.securityfocus.com/bid/17311 http://securitytracker.com/id?1015851 http://www.debian.org/security/2006/dsa-1027 http://secunia.com/advisories/19545 http://www.novell.com/linux/security/advisories/2006_08_sr.html http://secunia.com/advisories/19522 http://secunia.com/advisories/19571 http://www.osvdb.org/24367 http://www.redhat.com/support/errata/RHSA-2006-0486.html http://secunia.com/advisories/20624 ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc http://secunia.com/advisories/20782 http://www.mandriva.com/security/advisories?name=MDKSA-2006:061 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9475 https://usn.ubuntu.com/267-1/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=358892 https://usn.ubuntu.com/267-1/https://nvd.nist.gov

CVE-2006-0052

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect