FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-3636

This CVE name corresponds to:

Entered	Topic
2006-09-04	mailman -- Multiple Vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-3636 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-3636
Phase	Assigned(20060717)

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

Source	Reference
BUGTRAQ	20060913 Mailman 2.1.8 Multiple Security Issues
MLIST	[Mailman-Announce] 20060913 RELEASED: Mailman 2.1.9
MISC	http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt
CONFIRM	http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295
DEBIAN	DSA-1188
GENTOO	GLSA-200609-12
MANDRIVA	MDKSA-2006:165
REDHAT	RHSA-2006:0600
SUSE	SUSE-SR:2006:025
UBUNTU	USN-345-1
BID	19831
BID	20021
OVAL	oval:org.mitre.oval:def:10553
VUPEN	ADV-2006-3446
SECTRACK	1016808
SECUNIA	21732
SECUNIA	21792
SECUNIA	21879
SECUNIA	22011
SECUNIA	22020
SECUNIA	22227
SECUNIA	22639
XF	mailman-unspecified-xss(28731)