GNU Mailman 2.0.14
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:mailman:2.0.14:*:*:*:*:*:*:*
part: a version: 2.0.14 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Mailman (26be9dbf-0ffe-5018-a393-b7faf52952bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/mailman |
purl2cpe | 2026-06-01 10:11:55.443555 |
pkg:deb/ubuntu/mailman |
purl2cpe | 2026-06-01 10:11:55.443556 |
pkg:github/koumbit/mailman2 |
purl2cpe | 2026-06-01 10:11:55.443558 |
pkg:github/mailman/mailman |
purl2cpe | 2026-06-01 10:11:55.443559 |
pkg:gitlab/mailman/mailman |
purl2cpe | 2026-06-01 10:11:55.443560 |
pkg:gnu/mailman |
purl2cpe | 2026-06-01 10:11:55.443562 |
pkg:pypi/mailman |
purl2cpe | 2026-06-01 10:11:55.443563 |
pkg:rpm/fedora/mailman |
purl2cpe | 2026-06-01 10:11:55.443564 |
pkg:rpm/opensuse/mailman |
purl2cpe | 2026-06-01 10:11:55.443566 |
pkg:sourceforge/mailman |
purl2cpe | 2026-06-01 10:11:55.443567 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-0707 |
vulnerable | 2026-06-08 04:56:38.728173 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.
Published: 2011-02-22T18:00:00.000Z
Updated: 2024-08-06T21:58:26.088Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0052 |
vulnerable | 2026-06-08 04:48:45.823500 |
Details available
The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.
Published: 2006-03-31T11:00:00.000Z
Updated: 2024-08-07T16:18:20.931Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3573 |
vulnerable | 2026-06-08 04:48:41.233948 |
Details available
Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).
Published: 2005-11-16T07:37:00.000Z
Updated: 2024-08-07T23:17:23.414Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.