PT-2005-4852 · Gnu+1 · Mailman+1

Aliet Santiesteban Sifontes · Publicado 2005-12-11 · Atualizado 2017-10-11 · CVE-2005-4153

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Mailman versions 2.1.4 through 2.1.6

Description The issue allows remote attackers to cause a denial of service via a message that causes the server to fail with an Overflow on bad date data in a processed message.

Recommendations For Mailman versions 2.1.4 through 2.1.6, update to a version that fixes this issue to prevent denial of service attacks.

Correção

Identificadores relacionados

CVE-2005-4153

DSA-955-1

RHSA-2006:0204

RHSA-2006_0204

Produtos afetados

Mailman

Red Hat

Referências · 21

• http://osvdb.org/21723 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4153 · Nota de Segurança
• http://secunia.com/advisories/19196 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2005-4153 · Nota
• https://access.redhat.com/security/cve/CVE-2005-3573 · Nota
• ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U · Aviso do Fabricante
• http://securityfocus.com/bid/16248 · Nota
• http://secunia.com/advisories/19167 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10660 · Nota
• http://trustix.org/errata/2006/0012 · Aviso do Fabricante
• http://secunia.com/advisories/19532 · Aviso do Fabricante
• http://ubuntu.com/usn/usn-242-1 · Aviso do Fabricante
• http://debian.org/security/2006/dsa-955 · Aviso do Fabricante
• http://secunia.com/advisories/18612 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23139 · Nota