First published: Sun Dec 11 2005(Updated: )
Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE-2005-3573.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
GNU Mailman | =2.1.5 | |
GNU Mailman | =2.1.6 | |
GNU Mailman | =2.1.4 | |
Mailman | =2.1.4 | |
Mailman | =2.1.5 | |
Mailman | =2.1.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-4153 has a high severity level, as it allows remote attackers to cause a denial of service.
To fix CVE-2005-4153, upgrade Mailman to version 2.1.7 or later.
CVE-2005-4153 affects Mailman versions 2.1.4 through 2.1.6.
CVE-2005-4153 primarily causes a denial of service rather than direct data loss.
CVE-2005-4153 enables attackers to send specially crafted messages to crash the Mailman server.