Lucene search
GoogleOSV:DSA-2170-1HistoryFeb 18, 2011 - 12:00 a.m.
mailman - several vulnerabilities
2011-02-1800:00:00
Google
osv.dev
14
EPSS
0.003
Percentile
71.1%
Two cross site scripting vulnerabilities were been discovered in
Mailman, a web-based mailing list manager. These allowed an attacker
to retrieve session cookies via inserting crafted JavaScript into
confirmation messages (CVE-2011-0707) and in the list admin interface
(CVE-2010-3089; oldstable only).
For the oldstable distribution (lenny), these problems have been fixed in
version 1:2.1.11-11+lenny2.
For the stable distribution (squeeze), this problem has been fixed in
version 1:2.1.13-5.
For the testing (wheezy) and unstable distribution (sid), this problem
has been fixed in version 1:2.1.14-1.
We recommend that you upgrade your mailman packages.
References
Related
nessus
nessus
SuSE 10 Security Update : mailman (ZYPP Patch Number 7484)
2011-12-13 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : mailman vulnerabilities (USN-1069-1)
2011-02-23 00:00:00
openSUSE Security Update : mailman (openSUSE-SU-2011:0312-1)
2014-06-13 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: mailman-2.1.12-17.fc13
2011-03-21 20:56:57
[SECURITY] Fedora 14 Update: mailman-2.1.13-7.fc14
2011-03-21 21:00:30
[SECURITY] Fedora 15 Update: mailman-2.1.14-5.fc15
2011-03-22 03:44:29
openvas
openvas
Debian: Security Advisory (DSA-2170-1)
2011-03-09 00:00:00
Fedora Update for mailman FEDORA-2011-2102
2011-03-24 00:00:00
Fedora Update for mailman FEDORA-2011-2125
2011-03-24 00:00:00
ubuntu
ubuntu
Mailman vulnerabilities
2011-02-22 00:00:00
oraclelinux
oraclelinux
mailman security update
2011-03-01 00:00:00
mailman security update
2011-03-02 00:00:00
debian
debian
[SECURITY] [DSA 2170-1] mailman security update
2011-02-20 11:59:55
redhat
redhat
(RHSA-2011:0308) Moderate: mailman security update
2011-03-01 00:00:00
(RHSA-2011:0307) Moderate: mailman security update
2011-03-01 00:00:00
centos
centos
mailman security update
2011-03-03 03:36:16
altlinux
altlinux
Security fix for the ALT Linux 9 package mailman version 5:2.1.15-alt0.2
2012-10-17 00:00:00
debiancve
debiancve
CVE-2011-0707
2011-02-22 19:00:02
CVE-2010-3089
2010-09-15 20:00:02
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2011-02-26 00:00:00
[ MDVSA-2011:036 ] mailman
2011-02-26 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2020-04-10 00:53:46
Cross-site Scripting (XSS)
2020-04-10 00:53:46
cvelist
cvelist
CVE-2011-0707
2011-02-22 18:00:00
CVE-2010-3089
2010-09-15 19:00:00
nvd
nvd
cve
cve
prion
prion
Cross site scripting
2011-02-22 19:00:00
Cross site scripting
2010-09-15 20:00:00
Design/Logic Flaw
2014-02-10 18:15:00
freebsd
freebsd
mailman -- XSS vulnerability
2011-02-13 00:00:00
Mailman -- cross-site scripting in web interface
2010-09-14 00:00:00
ubuntucve
ubuntucve
CVE-2011-0707
2011-02-18 00:00:00
CVE-2010-3089
2010-09-15 00:00:00
osv
osv
mailman-2.1.23-1.2 on GA media
2024-06-15 00:00:00