CVE-2005-3573

Published: Nov 16, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).

Affected (24)

Products: Gnu: Mailman

1 product

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Gnu Mailman	Version 2.0.10
Gnu Mailman	Version 2.0.11
Gnu Mailman	Version 2.0.12
Gnu Mailman	Version 2.0.13
Gnu Mailman	Version 2.0.14
Gnu Mailman	Version 2.0.1
Gnu Mailman	Version 2.0.2
Gnu Mailman	Version 2.0.3
Gnu Mailman	Version 2.0.4
Gnu Mailman	Version 2.0.5
Gnu Mailman	Version 2.0.6
Gnu Mailman	Version 2.0.7
Gnu Mailman	Version 2.0.8
Gnu Mailman	Version 2.0.9
Gnu Mailman	Version 2.0 beta3
Gnu Mailman	Version 2.0 beta4
Gnu Mailman	Version 2.0 beta5
Gnu Mailman	Version 2.1.1 beta1
Gnu Mailman	Version 2.1.2
Gnu Mailman	Version 2.1.3
Gnu Mailman	Version 2.1.4
Gnu Mailman	Version 2.1.5.8
Gnu Mailman	Version 2.1.5
Gnu Mailman	Version 2.1

References (46)

ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U (unsafe URL)

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732

Source: cve@mitre.org

http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html

Source: cve@mitre.org

http://mail.python.org/pipermail/mailman-users/2005-September/046523.html

Source: cve@mitre.org

http://secunia.com/advisories/17511

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/17874

Source: cve@mitre.org

http://secunia.com/advisories/18456

Source: cve@mitre.org

http://secunia.com/advisories/18503

Source: cve@mitre.org

http://secunia.com/advisories/18612

Source: cve@mitre.org

http://secunia.com/advisories/19167

Source: cve@mitre.org

http://secunia.com/advisories/19196

Source: cve@mitre.org

http://secunia.com/advisories/19532

Source: cve@mitre.org

http://securitytracker.com/id?1015735

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-955

Source: cve@mitre.org

http://www.osvdb.org/20819

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0204.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/15408

Source: cve@mitre.org

http://www.trustix.org/errata/2006/0012/

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-242-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2404

Source: cve@mitre.org

http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23139

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://mail.python.org/pipermail/mailman-users/2005-September/046523.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17511

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/17874

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18456

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18503

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18612

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19167

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19196

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19532

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015735

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-955

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/20819

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0204.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15408

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.trustix.org/errata/2006/0012/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-242-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/2404

Source: af854a3a-2127-422b-91ae-364da2661108

http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/23139

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.