GNU Mailman 2.1b1

CPE Details

GNU Mailman 2.1b1
gnu
mailman
2.1b1
2007-08-23
19h16 +00:00
2007-09-14
15h36 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:gnu:mailman:2.1b1:*:*:*:*:*:*:*

Informations

Vendor

gnu

Product

mailman

Version

2.1b1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-34337 2023-04-15 00h00 +00:00 An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrary REST API calls. The REST API is bound to localhost by default, limiting the ability for attackers to exploit this, but can optionally be made to listen on other interfaces.
6.3
Medium
CVE-2011-0707 2011-02-22 17h00 +00:00 Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.
4.3
CVE-2006-2941 2006-09-05 22h00 +00:00 Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers".
5
CVE-2006-3636 2006-09-05 22h00 +00:00 Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
6.8
CVE-2006-0052 2006-03-31 09h00 +00:00 The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.
5
CVE-2005-0202 2005-02-09 04h00 +00:00 Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences.
5
CVE-2004-1143 2005-01-19 04h00 +00:00 The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.
7.5
CVE-2004-1177 2005-01-19 04h00 +00:00 Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.
4.3
CVE-2004-0412 2004-06-03 02h00 +00:00 Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.
5
CVE-2002-0389 2003-04-02 03h00 +00:00 Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives.
2.1
CVE-2001-0884 2002-06-25 02h00 +00:00 Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users.
5.1