Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Gentoo: 200501-29 Low: Mailman Cross-Site Scripting Threat

gentoo
Calendar Grey January 22, 2005
Scroller Gentoo
Gentoo Linux Security Advisory GLSA 202110-15 highlights a moderate severity vulnerability related to remote code execution in Puppet.
Mailman is vulnerable to cross-site scripting attacks.

Summary

Gentoo Linux Security Advisory GLSA 200501-29 https://security.gentoo.org/ Severity: Low Title: Mailman: Cross-site scripting vulnerability Date: January 22, 2005 Bugs: #77524 ID: 200501-29

Synopsis ======= Mailman is vulnerable to cross-site scripting attacks.
Background ========= Mailman is a Python-based mailing list server with an extensive web interface.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-mail/mailman < 2.1.5-r3 >= 2.1.5-r3
========== Florian Weimer has discovered a cross-site scripting vulnerability in the error messages that are produced by Mailman.
Impact ===== By enticing a user to visiting a specially-crafted URL, an attacker can ex...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Gentoo cross-site scripting low severity Mailman

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
low
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory Gentoo cross-site scripting low severity Mailman

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround