FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2003-0038

This CVE name corresponds to:

Entered	Topic
2004-02-25	mailman XSS in user options page

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2003-0038 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2003-0038
Phase	Modified(20071129)

Description

Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or (2) language parameters.

References

Source	Reference
BUGTRAQ	20030124 Mailman: cross-site scripting bug
CONFIRM	http://telia.dl.sourceforge.net/sourceforge/mailman/xss-2.1.0-patch.txt
DEBIAN	DSA-436
BID	6677
OSVDB	9205
SECTRACK	1005987
XF	mailman-email-variable-xss(11152)