Gentoo: mailman XSS vulnerabilities
The email variable and the default error page in mailmain 2.1 contains cross site scripting vulnerabilities.
Summary
- --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200302-05 - --------------------------------------------------------------------- DATE : 2003-02-17 09:16 UTC
- ---------------------------------------------------------------------
The email variable and the default error page in mailmain 2.1 contains cross site scripting vulnerabilities.
Read the full advisory at: http://marc.theaimsgroup.com/?l=bugtraq&m=104342745916111&w=2
SOLUTION
It is recommended that all Gentoo Linux users who are running net-mail/mailman upgrade to mailman-2.1.1 as follows:
emerge sync emerge -u mailman emerge clean
- --------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at - ---------------------------------------------------------------------
Resolution
References
Availability
Concerns
Severity
PACKAGE : mailman
SUMMARY : cross site scripting
EXPLOIT : remote
