Nessus Plugin #14931

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA094] DSA-094-1 mailman

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-094-1 mailman

Version:

$Revision: 1.4 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

DSA:094

Description:

Barry A. Warsaw reported several cross-site scripting security holes
in Mailman, due to non-existent escaping of CGI variables.

These have been fixed upstream in version 2.0.8, and the relevant
patches have been backported to version 1.1-10 in Debian.



Solution : http://www.debian.org/security/2001/dsa-094
Risk factor : High