CVEvulnerability
CVE-2006-3636
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-09-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• gnu mailman 2.1
• gnu mailman 2.1.1
• gnu mailman 2.1.2
• gnu mailman 2.1.3
• gnu mailman 2.1.4
• gnu mailman 2.1.5
• gnu mailman 2.1.5.8
• gnu mailman 2.1.6
• gnu mailman 2.1.7
• gnu mailman 2.1.8
• gnu mailman 2.1b1
References
- http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html mail.python.org
- http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt moritz-naumann.com
- http://rhn.redhat.com/errata/RHSA-2006-0600.html rhn.redhat.com
- http://secunia.com/advisories/21732 Patch, Vendor Advisory
- http://secunia.com/advisories/21792 secunia.com
- http://secunia.com/advisories/21879 secunia.com
- http://secunia.com/advisories/22011 secunia.com
- http://secunia.com/advisories/22020 secunia.com
- http://secunia.com/advisories/22227 secunia.com
- http://secunia.com/advisories/22639 secunia.com
- http://security.gentoo.org/glsa/glsa-200609-12.xml security.gentoo.org
- http://securitytracker.com/id?1016808 securitytracker.com
- http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295 Patch
- http://www.debian.org/security/2006/dsa-1188 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:165 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2006_25_sr.html www.novell.com
- http://www.securityfocus.com/archive/1/445992/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19831 www.securityfocus.com
- http://www.securityfocus.com/bid/20021 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-345-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2006/3446 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28731 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10553 oval.cisecurity.org
- http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html mail.python.org
- http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt moritz-naumann.com
- http://rhn.redhat.com/errata/RHSA-2006-0600.html rhn.redhat.com
- http://secunia.com/advisories/21732 Patch, Vendor Advisory
- http://secunia.com/advisories/21792 secunia.com
- http://secunia.com/advisories/21879 secunia.com
- http://secunia.com/advisories/22011 secunia.com
- http://secunia.com/advisories/22020 secunia.com
- http://secunia.com/advisories/22227 secunia.com
- http://secunia.com/advisories/22639 secunia.com
- http://security.gentoo.org/glsa/glsa-200609-12.xml security.gentoo.org
- http://securitytracker.com/id?1016808 securitytracker.com
- http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295 Patch
- http://www.debian.org/security/2006/dsa-1188 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:165 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2006_25_sr.html www.novell.com
- http://www.securityfocus.com/archive/1/445992/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19831 www.securityfocus.com
- http://www.securityfocus.com/bid/20021 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-345-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2006/3446 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28731 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10553 oval.cisecurity.org