CVE-2006-3636

Published: Sep 6, 2006Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (12)

Products: Gnu: Mailman

1 product

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Gnu Mailman	Version 2.1.1
Gnu Mailman	Version 2.1.1 beta1
Gnu Mailman	Version 2.1.2
Gnu Mailman	Version 2.1.3
Gnu Mailman	Version 2.1.4
Gnu Mailman	Version 2.1.5.8
Gnu Mailman	Version 2.1.5
Gnu Mailman	Version 2.1.6
Gnu Mailman	Version 2.1.7
Gnu Mailman	Version 2.1.8
Gnu Mailman	Version 2.1
Gnu Mailman	Version 2.1b1

References (46)

http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html

Source: secalert@redhat.com

http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2006-0600.html

Source: secalert@redhat.com

http://secunia.com/advisories/21732

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/21792

Source: secalert@redhat.com

http://secunia.com/advisories/21879

Source: secalert@redhat.com

http://secunia.com/advisories/22011

Source: secalert@redhat.com

http://secunia.com/advisories/22020

Source: secalert@redhat.com

http://secunia.com/advisories/22227

Source: secalert@redhat.com

http://secunia.com/advisories/22639

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200609-12.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1016808

Source: secalert@redhat.com

http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295

Source: secalert@redhat.com

Patch

http://www.debian.org/security/2006/dsa-1188

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:165

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_25_sr.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/445992/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/19831

Source: secalert@redhat.com

http://www.securityfocus.com/bid/20021

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-345-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/3446

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/28731

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10553

Source: secalert@redhat.com

http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2006-0600.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21732

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/21792

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21879

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22011

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22020

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22227

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22639

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200609-12.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016808

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.debian.org/security/2006/dsa-1188

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:165

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_25_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/445992/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19831

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/20021

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-345-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3446

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/28731

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10553

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.