Vulnerability   
Search   
    Search 211766 CVE descriptions
and 97459 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.51898
Category:Red Hat Local Security Checks
Title:RedHat Security Advisory RHSA-2005:235
Summary:NOSUMMARY
Description:Description:

The remote host is missing updates announced in
advisory RHSA-2005:235.

Mailman manages electronic mail discussion and e-newsletter lists.

A cross-site scripting (XSS) flaw in the driver script of mailman prior to
version 2.1.5 could allow remote attackers to execute scripts as other web
users. The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CVE-2004-1177 to this issue.

Users of mailman should update to this erratum package, which corrects this
issue by turning on STEALTH_MODE by default and using Utils.websafe() to
quote the html.

Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date

http://rhn.redhat.com/errata/RHSA-2005-235.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1177

Risk factor : Medium

CVSS Score:
4.3

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2004-1177
Bugtraq: 20050110 [USN-59-1] mailman vulnerabilities (Google Search)
http://marc.info/?l=bugtraq&m=110549296126351&w=2
Debian Security Information: DSA-674 (Google Search)
http://www.debian.org/security/2005/dsa-674
http://www.mandriva.com/security/advisories?name=MDKSA-2005:015
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11113
http://www.redhat.com/support/errata/RHSA-2005-235.html
http://secunia.com/advisories/13603
SuSE Security Announcement: SUSE-SA:2005:007 (Google Search)
http://www.novell.com/linux/security/advisories/2005_07_mailman.html
XForce ISS Database: mailman-script-driver-xss(18854)
https://exchange.xforce.ibmcloud.com/vulnerabilities/18854
CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 97459 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.