Mailman (Gnu) - vulnerabilities (CVEs)

47 CVEs, 0 in the last 30 days, 109 known versions, newest CVE from 2025-04-20. Vendor: Gnu.

CVEs of Mailman

CVE-2025-43921 - CVSS 5.3 (medium), 2025-04-20: GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint. NOTE: multiple third…
CVE-2025-43920 - CVSS 8.1 (high), 2025-04-20: GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS…
CVE-2025-43919 - CVSS 7.5 (high), 2025-04-20: GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at…
CVE-2021-34337 - CVSS 6.3 (medium), 2023-04-15: An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the…
CVE-2021-44227 - CVSS 8.8 (high), 2021-12-02: In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or…
CVE-2021-43332 - CVSS 6.5 (medium), 2021-11-12: In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could…
CVE-2021-43331 - CVSS 6.1 (medium), 2021-11-12: In GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute arbitrary JavaScript for XSS.
CVE-2021-42096 - CVSS 4.3 (medium), 2021-10-21: GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in…
CVE-2021-42097 - CVSS 8 (high), 2021-10-21: GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value…
CVE-2020-15011 - CVSS 4.3 (medium), 2020-06-24: GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
CVE-2020-12108 - CVSS 6.5 (medium), 2020-05-06: /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.
CVE-2020-12137 - CVSS 6.1 (medium), 2020-04-24: GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against…
CVE-2018-0618 - CVSS 5.4 (medium), 2018-07-26: Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified…
CVE-2018-13796 - CVSS 6.5 (medium), 2018-07-12: An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.
CVE-2018-5950 - CVSS 6.1 (medium), 2018-01-23: Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a…
CVE-2016-7123 - CVSS 8.8 (high), 2016-09-02: Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication…
CVE-2016-6893 - CVSS 8.8 (high), 2016-09-02: Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the…
CVE-2015-2775 - CVSS 7.6 (high), 2015-04-13: Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a ..…
CVE-2011-5024 - CVSS 4.3 (medium), 2011-12-29: Cross-site scripting (XSS) vulnerability in mmsearch/design in the Mailman/htdig integration patch for Mailman allows remote attackers to inject arbitrary web…
CVE-2011-0707 - CVSS 4.3 (medium), 2011-02-22: Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script…
CVE-2010-3089 - CVSS 3.5 (low), 2010-09-15: Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML…
CVE-2006-2191 - CVSS 7.5 (high), 2006-09-19: Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this…
CVE-2006-4624 - CVSS 2.6 (low), 2006-09-07: CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the error log and possibly trick the…
CVE-2006-2941 - CVSS 5 (medium), 2006-09-06: Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers".
CVE-2006-3636 - CVSS 6.8 (medium), 2006-09-06: Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified…
CVE-2006-1712 - CVSS 2.6 (low), 2006-04-11: Cross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web…
CVE-2006-0052 - CVSS 5 (medium), 2006-03-31: The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of…
CVE-2005-4153 - CVSS 7.8 (high), 2005-12-11: Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date…
CVE-2005-3573 - CVSS 5 (medium), 2005-11-16: Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a…
CVE-2005-0080 - CVSS 5 (medium), 2005-05-02: The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is…
CVE-2005-0202 - CVSS 5 (medium), 2005-05-02: Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via…
CVE-2004-1177 - CVSS 4.3 (medium), 2005-01-10: Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a…
CVE-2004-1143 - CVSS 7.5 (high), 2004-12-31: The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which makes it easier for remote attackers to guess passwords via a…
CVE-2004-0412 - CVSS 5 (medium), 2004-08-18: Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.
CVE-2004-0182 - CVSS 5 (medium), 2004-06-01: Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email message with an empty subject field.
CVE-2003-0991 - CVSS 5 (medium), 2004-03-03: Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service (crash) via malformed e-mail…
CVE-2003-0992 - CVSS 4.3 (medium), 2004-02-17: Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users.
CVE-2003-0965 - CVSS 6.8 (medium), 2004-02-17: Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct…
CVE-2003-0038 - CVSS 4.3 (medium), 2003-02-07: Cross-site scripting (XSS) vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the (1) email or…
CVE-2002-0855 - CVSS 7.5 (high), 2002-09-05: Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription…
CVE-2002-0389 - CVSS 2.1 (low), 2002-06-18: Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing…
CVE-2002-0388 - CVSS 7.5 (high), 2002-06-18: Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail…
CVE-2001-0884 - CVSS 5.1 (medium), 2001-12-21: Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a…
CVE-2001-1132 - CVSS 7.5 (high), 2001-09-05: Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not…
CVE-2001-0290 - CVSS 4.6 (medium), 2001-05-03: Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords.
CVE-2000-0861 - CVSS 7.2 (high), 2000-11-14: Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.
CVE-2000-0701 - CVSS 4.6 (medium), 2000-10-20: The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges.