CVE-2010-3089

2010-09-1500:00:00

ubuntu.com

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.002

Percentile

53.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before
2.1.14rc1 allow remote authenticated users to inject arbitrary web script
or HTML via vectors involving (1) the list information field or (2) the
list description field.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=599833>

Notes

Author	Note
mdeslaur	fixed in debian 1:2.1.13-4.1

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmailman< 2.1.5-9ubuntu4.4UNKNOWN
ubuntu8.04noarchmailman< 1:2.1.9-9ubuntu1.4UNKNOWN
ubuntu9.10noarchmailman< 1:2.1.12-2ubuntu0.2UNKNOWN
ubuntu10.04noarchmailman< 1:2.1.13-1ubuntu0.2UNKNOWN
ubuntu10.10noarchmailman< 1:2.1.13-4ubuntu0.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	mailman	< 2.1.5-9ubuntu4.4	UNKNOWN
ubuntu	8.04	noarch	mailman	< 1:2.1.9-9ubuntu1.4	UNKNOWN
ubuntu	9.10	noarch	mailman	< 1:2.1.12-2ubuntu0.2	UNKNOWN
ubuntu	10.04	noarch	mailman	< 1:2.1.13-1ubuntu0.2	UNKNOWN
ubuntu	10.10	noarch	mailman	< 1:2.1.13-4ubuntu0.2	UNKNOWN