CVE-2005-3573

Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).

Affected Software

Name	Vendor	Start Version	End Version
Mailman	Gnu	2.0-beta3 (including)	2.0-beta3 (including)
Mailman	Gnu	2.0-beta4 (including)	2.0-beta4 (including)
Mailman	Gnu	2.0-beta5 (including)	2.0-beta5 (including)
Mailman	Gnu	2.0.1 (including)	2.0.1 (including)
Mailman	Gnu	2.0.2 (including)	2.0.2 (including)
Mailman	Gnu	2.0.3 (including)	2.0.3 (including)
Mailman	Gnu	2.0.4 (including)	2.0.4 (including)
Mailman	Gnu	2.0.5 (including)	2.0.5 (including)
Mailman	Gnu	2.0.6 (including)	2.0.6 (including)
Mailman	Gnu	2.0.7 (including)	2.0.7 (including)
Mailman	Gnu	2.0.8 (including)	2.0.8 (including)
Mailman	Gnu	2.0.9 (including)	2.0.9 (including)
Mailman	Gnu	2.0.10 (including)	2.0.10 (including)
Mailman	Gnu	2.0.11 (including)	2.0.11 (including)
Mailman	Gnu	2.0.12 (including)	2.0.12 (including)
Mailman	Gnu	2.0.13 (including)	2.0.13 (including)
Mailman	Gnu	2.0.14 (including)	2.0.14 (including)
Mailman	Gnu	2.1 (including)	2.1 (including)
Mailman	Gnu	2.1.1-beta1 (including)	2.1.1-beta1 (including)
Mailman	Gnu	2.1.2 (including)	2.1.2 (including)
Mailman	Gnu	2.1.3 (including)	2.1.3 (including)
Mailman	Gnu	2.1.4 (including)	2.1.4 (including)
Mailman	Gnu	2.1.5 (including)	2.1.5 (including)
Mailman	Gnu	2.1.5.8 (including)	2.1.5.8 (including)
Red Hat Enterprise Linux 3	RedHat	mailman-3:2.1.5.1-25.rhel3.4	*
Red Hat Enterprise Linux 4	RedHat	mailman-3:2.1.5.1-34.rhel4.2	*
Mailman	Ubuntu	devel	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2005-3573
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References