CVE-2006-0052 The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) v...
MediumCVSS 5.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU mailman | = 1.0 | No fix listed |
| GNU mailman | = 1.1 | No fix listed |
| GNU mailman | = 2.0 | No fix listed |
| GNU mailman | = 2.0-beta3 | No fix listed |
| GNU mailman | = 2.0-beta4 | No fix listed |
| GNU mailman | = 2.0-beta5 | No fix listed |
| GNU mailman | = 2.0.1 | No fix listed |
| GNU mailman | = 2.0.2 | No fix listed |
| GNU mailman | = 2.0.3 | No fix listed |
| GNU mailman | = 2.0.4 | No fix listed |
| GNU mailman | = 2.0.5 | No fix listed |
| GNU mailman | = 2.0.6 | No fix listed |
| GNU mailman | = 2.0.7 | No fix listed |
| GNU mailman | = 2.0.8 | No fix listed |
| GNU mailman | = 2.0.9 | No fix listed |
| GNU mailman | = 2.0.10 | No fix listed |
| GNU mailman | = 2.0.11 | No fix listed |
| GNU mailman | = 2.0.12 | No fix listed |
| GNU mailman | = 2.0.13 | No fix listed |
| GNU mailman | = 2.0.14 | No fix listed |
| GNU mailman | = 2.1 | No fix listed |
| GNU mailman | = 2.1.1 | No fix listed |
| GNU mailman | = 2.1.2 | No fix listed |
| GNU mailman | = 2.1.3 | No fix listed |
| GNU mailman | = 2.1.4 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU mailman | = 2.1.5 | No fix listed |
| GNU mailman | = 2.1b1 | No fix listed |
References
- bugs.debian.org patch
- 19522 third-party-advisory
- 19545 third-party-advisory
- 19571 third-party-advisory
- 20624 third-party-advisory
- 20782 third-party-advisory
- 1015851 vdb-entry
- DSA-1027 vendor-advisory
- MDKSA-2006:061 vendor-advisory
- SUSE-SR:2006:008 vendor-advisory
- 24367 vdb-entry
- RHSA-2006:0486 vendor-advisory
- 17311 patch vdb-entry
- oval:org.mitre.oval:def:9475 signature vdb-entry
- USN-267-1 vendor-advisory