CVEvulnerability

CVE-2006-4624

2.6 LOW Published 2006-09-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-09-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Weaknesses
CWE-94

Description

CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the error log and possibly trick the administrator into visiting malicious URLs via CRLF sequences in the URI.

Affected configurations

• gnu mailman (<= 2.1.8)

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

Referenced by CWE · observed example (2)

  • CWE-117 Improper Output Neutralization for Logs weakness
  • CWE-93 Improper Neutralization of CRLF Sequences weakness

References