CVE-2008-0564

Published: Feb 5, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) editing templates and (2) the list's "info attribute" in the web administrator interface, a different vulnerability than CVE-2006-3636.

Affected (1)

Products: Mailman: Mailman

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mailman Mailman	Up to 2.1.10b

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (46)

http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

Source: cve@mitre.org

http://mail.python.org/pipermail/mailman-announce/2008-February/000096.html

Source: cve@mitre.org

http://secunia.com/advisories/28794

Source: cve@mitre.org

http://secunia.com/advisories/28916

Source: cve@mitre.org

http://secunia.com/advisories/28966

Source: cve@mitre.org

http://secunia.com/advisories/29249

Source: cve@mitre.org

http://secunia.com/advisories/29388

Source: cve@mitre.org

http://secunia.com/advisories/31687

Source: cve@mitre.org

http://secunia.com/advisories/43549

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=559308&group_id=103

Source: cve@mitre.org

http://support.apple.com/kb/HT4077

Source: cve@mitre.org

http://wiki.rpath.com/Advisories:rPSA-2008-0056

Source: cve@mitre.org

http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:061

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2011-0307.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/488236/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/27630

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-586-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0422

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0542

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=431526

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-2207

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00452.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://mail.python.org/pipermail/mailman-announce/2008-February/000096.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28794

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28916

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28966

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29249

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29388

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31687

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43549

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?release_id=559308&group_id=103

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT4077

Source: af854a3a-2127-422b-91ae-364da2661108

http://wiki.rpath.com/Advisories:rPSA-2008-0056

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:061

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-0307.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/488236/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/27630

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-586-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0422

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0542

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=431526

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-2207

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00452.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.