CVE-2006-0052: Medium severity GNU Mailman vulnerability
The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0052?
CVE-2006-0052 is considered a denial of service vulnerability that can disrupt mailing list delivery.
How do I fix CVE-2006-0052?
To mitigate CVE-2006-0052, upgrade Mailman to version 2.1.6 or later.
What versions of Mailman are affected by CVE-2006-0052?
CVE-2006-0052 affects Mailman versions 2.1.5 and earlier, as well as certain 2.0.x versions.
Can CVE-2006-0052 be exploited remotely?
Yes, an attacker can exploit CVE-2006-0052 remotely through specially crafted multipart MIME messages.
What impact does CVE-2006-0052 have on email systems?
The impact of CVE-2006-0052 includes potential denial of service, leading to failure in mailing list message delivery.