CVE Vulnerabilities

CVE-2004-1177

Published: Jan 10, 2005 | Modified: Oct 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.

Affected Software

Name Vendor Start Version End Version
Mailman Gnu 1.0 1.0
Mailman Gnu 1.1 1.1
Mailman Gnu 2.0 2.0
Mailman Gnu 2.0 2.0
Mailman Gnu 2.0 2.0
Mailman Gnu 2.0 2.0
Mailman Gnu 2.0.1 2.0.1
Mailman Gnu 2.0.2 2.0.2
Mailman Gnu 2.0.3 2.0.3
Mailman Gnu 2.0.4 2.0.4
Mailman Gnu 2.0.5 2.0.5
Mailman Gnu 2.0.6 2.0.6
Mailman Gnu 2.0.7 2.0.7
Mailman Gnu 2.0.8 2.0.8
Mailman Gnu 2.0.9 2.0.9
Mailman Gnu 2.0.10 2.0.10
Mailman Gnu 2.0.11 2.0.11
Mailman Gnu 2.0.12 2.0.12
Mailman Gnu 2.0.13 2.0.13
Mailman Gnu 2.1 2.1
Mailman Gnu 2.1.1 2.1.1
Mailman Gnu 2.1.2 2.1.2
Mailman Gnu 2.1.3 2.1.3
Mailman Gnu 2.1.4 2.1.4
Mailman Gnu 2.1b1 2.1b1
Red Hat Enterprise Linux 3 RedHat mailman-3:2.1.5-25.rhel3 *
Red Hat Enterprise Linux 4 RedHat mailman-3:2.1.5-33.rhel4 *
Mailman Ubuntu dapper *
Mailman Ubuntu devel *
Mailman Ubuntu edgy *
Mailman Ubuntu feisty *

References