CVE-2003-0038

Published: Feb 7, 2003Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.

Affected (1)

Products: Gnu: Mailman

Gnu

1 product

Mailman

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Mailman	Version 2.1

References (14)

http://marc.info/?l=bugtraq&m=104342745916111

Source: cve@mitre.org

http://telia.dl.sourceforge.net/sourceforge/mailman/xss-2.1.0-patch.txt

Source: cve@mitre.org

Patch

http://www.debian.org/security/2004/dsa-436

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/9205

Source: cve@mitre.org

http://www.securityfocus.com/bid/6677

Source: cve@mitre.org

http://www.securitytracker.com/id?1005987

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/11152

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104342745916111