PT-2005-4852 · Gnu+1 · Mailman+1

Aliet Santiesteban Sifontes · Published 2005-12-11 · Updated 2017-10-11 · CVE-2005-4153

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Mailman versions 2.1.4 through 2.1.6

Description The issue allows remote attackers to cause a denial of service via a message that causes the server to fail with an Overflow on bad date data in a processed message.

Recommendations For Mailman versions 2.1.4 through 2.1.6, update to a version that fixes this issue to prevent denial of service attacks.

Fix

Related Identifiers

CVE-2005-4153

DSA-955-1

RHSA-2006:0204

RHSA-2006_0204

Affected Products

Mailman

Red Hat

References · 21

• https://nvd.nist.gov/vuln/detail/CVE-2005-4153 · Security Note
• http://secunia.com/advisories/19196 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U · Vendor Advisory
• http://secunia.com/advisories/19167 · Vendor Advisory
• http://trustix.org/errata/2006/0012 · Vendor Advisory
• http://secunia.com/advisories/19532 · Vendor Advisory
• http://ubuntu.com/usn/usn-242-1 · Vendor Advisory
• http://debian.org/security/2006/dsa-955 · Vendor Advisory
• http://secunia.com/advisories/18612 · Vendor Advisory
• http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222 · Vendor Advisory
• http://secunia.com/advisories/18449 · Vendor Advisory
• http://secunia.com/advisories/18456 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0204.html · Vendor Advisory
• http://osvdb.org/21723 · Note
• https://access.redhat.com/security/cve/CVE-2005-4153 · Note