GNU Mailman 2.0.10
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:mailman:2.0.10:*:*:*:*:*:*:*
part: a version: 2.0.10 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Mailman (26be9dbf-0ffe-5018-a393-b7faf52952bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/mailman |
purl2cpe | 2026-06-01 10:11:55.443502 |
pkg:deb/ubuntu/mailman |
purl2cpe | 2026-06-01 10:11:55.443503 |
pkg:github/koumbit/mailman2 |
purl2cpe | 2026-06-01 10:11:55.443505 |
pkg:github/mailman/mailman |
purl2cpe | 2026-06-01 10:11:55.443506 |
pkg:gitlab/mailman/mailman |
purl2cpe | 2026-06-01 10:11:55.443507 |
pkg:gnu/mailman |
purl2cpe | 2026-06-01 10:11:55.443509 |
pkg:pypi/mailman |
purl2cpe | 2026-06-01 10:11:55.443510 |
pkg:rpm/fedora/mailman |
purl2cpe | 2026-06-01 10:11:55.443511 |
pkg:rpm/opensuse/mailman |
purl2cpe | 2026-06-01 10:11:55.443513 |
pkg:sourceforge/mailman |
purl2cpe | 2026-06-01 10:11:55.443514 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-0707 |
vulnerable | 2026-06-08 04:56:38.725850 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.
Published: 2011-02-22T18:00:00.000Z
Updated: 2024-08-06T21:58:26.088Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0052 |
vulnerable | 2026-06-08 04:48:45.823431 |
Details available
The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.
Published: 2006-03-31T11:00:00.000Z
Updated: 2024-08-07T16:18:20.931Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3573 |
vulnerable | 2026-06-08 04:48:41.231871 |
Details available
Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).
Published: 2005-11-16T07:37:00.000Z
Updated: 2024-08-07T23:17:23.414Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1177 |
vulnerable | 2026-06-08 04:47:53.212498 |
Details available
Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.
Published: 2005-01-19T05:00:00.000Z
Updated: 2024-08-08T00:46:11.511Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1143 |
vulnerable | 2026-06-08 04:47:53.084019 |
Details available
The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.
Published: 2005-01-19T05:00:00.000Z
Updated: 2024-08-08T00:39:00.943Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0991 |
vulnerable | 2026-06-08 04:47:23.058554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.