Ubuntu update for mailman - Secunia Advisories - Vulnerability Intelligence

Ubuntu update for mailman
Secunia Advisory:	SA21879	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2006-09-13
Popularity:	5,242 views

Critical:	Moderately critical
Impact:	Cross Site Scripting Spoofing DoS
Where:	From remote
Solution Status:	Vendor Patch

OS:	Ubuntu Linux 5.04 Ubuntu Linux 5.10 Ubuntu Linux 6.06

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2006-2941 CVE-2006-3636

Description: Ubuntu has issued an update for mailman. This fixes some vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting and phishing attacks, and cause a DoS (Denial of Service). For more information: SA21732 Solution: Apply updated packages. -- Ubuntu 5.04 -- Source archives: http://security.ubuntu.com/ubuntu/poo...lman/mailman_2.1.5-7ubuntu0.3.diff.gz Size/MD5: 122672 040be0e94a3463829deda6255b81914c http://security.ubuntu.com/ubuntu/poo.../mailman/mailman_2.1.5-7ubuntu0.3.dsc Size/MD5: 669 6533900d800881c5e5e97661592fe9b1 http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5.orig.tar.gz Size/MD5: 5745912 f5f56f04747cd4aff67427e7a45631af amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/poo...an/mailman_2.1.5-7ubuntu0.3_amd64.deb Size/MD5: 6610396 9e485ddc61fea15ffaacebeb176bc924 i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/poo...man/mailman_2.1.5-7ubuntu0.3_i386.deb Size/MD5: 6610126 7a76e92c25d14c439141c243f807ac59 powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/poo.../mailman_2.1.5-7ubuntu0.3_powerpc.deb Size/MD5: 6617368 a0c258a612fc19b87f756dfd1b2f5604 -- Ubuntu 5.10 -- Source archives: http://security.ubuntu.com/ubuntu/poo...lman/mailman_2.1.5-8ubuntu2.3.diff.gz Size/MD5: 124569 edd592fdc5d979588cfa307d80f389ee http://security.ubuntu.com/ubuntu/poo.../mailman/mailman_2.1.5-8ubuntu2.3.dsc Size/MD5: 626 52ca3b4a7132ed400701b33a9d1fa07c http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5.orig.tar.gz Size/MD5: 5745912 f5f56f04747cd4aff67427e7a45631af amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/poo...an/mailman_2.1.5-8ubuntu2.3_amd64.deb Size/MD5: 6611062 4808daed20ff5871d0878041dc65c278 i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/poo...man/mailman_2.1.5-8ubuntu2.3_i386.deb Size/MD5: 6610402 bae1a8798cc5518e204ac418d4108330 powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/poo.../mailman_2.1.5-8ubuntu2.3_powerpc.deb Size/MD5: 6617772 c397e9d02be876896f4c519da2965dce sparc architecture (Sun SPARC/UltraSPARC) http://security.ubuntu.com/ubuntu/poo...an/mailman_2.1.5-8ubuntu2.3_sparc.deb Size/MD5: 6616692 9714c5ffcedced686d5d2224f373f63a -- Ubuntu 6.06 LTS -- Source archives: http://security.ubuntu.com/ubuntu/poo...lman/mailman_2.1.5-9ubuntu4.1.diff.gz Size/MD5: 228878 efe29915311336eea806f75a489ae876 http://security.ubuntu.com/ubuntu/poo.../mailman/mailman_2.1.5-9ubuntu4.1.dsc Size/MD5: 628 61d4ee8cb059d6073c845c63ab9428a3 http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5.orig.tar.gz Size/MD5: 5745912 f5f56f04747cd4aff67427e7a45631af amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/poo...an/mailman_2.1.5-9ubuntu4.1_amd64.deb Size/MD5: 6612630 20c59f9de0ad456f476d9222deaf232f i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/poo...man/mailman_2.1.5-9ubuntu4.1_i386.deb Size/MD5: 6612422 b22f69ab0ad00a70cc4cf9526521ae02 powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/poo.../mailman_2.1.5-9ubuntu4.1_powerpc.deb Size/MD5: 6620218 57752d37e3514f437bfbddd458203306 sparc architecture (Sun SPARC/UltraSPARC) http://security.ubuntu.com/ubuntu/poo...an/mailman_2.1.5-9ubuntu4.1_sparc.deb Size/MD5: 6618874 870ca284b9c208a8937ef2890506a93c Original Advisory: http://www.ubuntu.com/usn/usn-345-1 Other References: SA21732: http://secunia.com/advisories/21732/

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

10th Oct, 2008

New advisories:	15
New vulnerabilities:	83
Updated advisories:	41

Moderately // 688 views

ScriptsEz Easy Image Downloader "id" File Disclosure Vulnerability

Moderately // 678 views

Built2go Real Estate Listings "event_id" SQL Injection

Highly // 976 views

Sun Java System Web Proxy Server FTP Subsystem Buffer Overflow

Moderately // 712 views

Red Hat update for cups

Highly // 726 views

DFF PHP Framework API "DFF_config[dir_incl ude]" File Inclusion Vulnerabilities

Not // 792 views

FUJITSU Interstage Products Apache Tomcat Security Bypass

Moderately // 1,055 views

Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

Moderately // 687 views

Fedora update for condor

Moderately // 1,081 views

CUPS Multiple Vulnerabilities

Not // 754 views

Gentoo Portage Insecure Python Module Search Path Security Issue

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.