RHSA-2006:0600: mailman security update
Mailman is a program used to help manage email discussion lists.A flaw was found in the way Mailman handled MIME multipart messages. Anattacker could send a carefully crafted MIME multipart email message to amailing list run by Mailman which caused that particular mailing listto stop working. (CVE-2006-2941)Several cross-site scripting (XSS) issues were found in Mailman. Anattacker could exploit these issues to perform cross-site scripting attacksagainst the Mailman administrator. (CVE-2006-3636)Red Hat would like to thank Barry Warsaw for disclosing these vulnerabilities.Users of Mailman should upgrade to these updated packages, which containbackported patches to correct this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2006:0600?
The severity of RHSA-2006:0600 is classified as moderate.
How do I fix RHSA-2006:0600?
To fix RHSA-2006:0600, you should update the Mailman package to version 2.1.5.1-34.rhel4.5.
What software is affected by RHSA-2006:0600?
RHSA-2006:0600 affects Mailman version prior to 2.1.5.1-34.rhel4.5.
What type of vulnerability is addressed in RHSA-2006:0600?
RHSA-2006:0600 addresses a vulnerability in how Mailman handles MIME multipart messages.
Who published the advisory for RHSA-2006:0600?
The advisory for RHSA-2006:0600 was published by Red Hat.