OSVDB ID: 24367

Title: Mailman Scrubber.py Crafted Multipart MIME Message DoS

Info

Disclosure
Jan 09, 2005

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 Mailman contains a flaw that may allow a remote denial of service. The issue is triggered when a multipart MIME message with a malformed part is received by the 'Scrubber.py' script, and will result in loss of availability for the list.

Classification

 Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Public
Disclosure: Vendor Verified

Solution

 Upgrade to version the version recommended by the vendor, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Mandriva

Mailman

 mailman-2.1.5-15mdk
mailman-2.1.5-15.3.102mdk
mailman-2.1.4-2.6.C30mdk

Debian

Mailman

 mailman-2.1.5-8sarge2
mailman-2.1.5-8

Ubuntu

Mailman

 mailman_2.1.5-1ubuntu2.7
mailman_2.1.5-7ubuntu0.2
mailman_2.1.5-8ubuntu2.2
mailman_2.1.5-1ubuntu2
mailman_2.1.5-7
mailman_2.1.5-8ubuntu2

Free Software Foundation

Mailman

 2.1.5
2.1.6

References

Credit
  • Sven Hartge - svensvenhartge.de -


Direct URL: http://osvdb.org/24367