GNU Mailman 2.1b1
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:mailman:2.1b1:*:*:*:*:*:*:*
part: a version: 2.1b1 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Mailman (26be9dbf-0ffe-5018-a393-b7faf52952bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/mailman |
purl2cpe | 2026-06-01 10:11:55.444602 |
pkg:deb/ubuntu/mailman |
purl2cpe | 2026-06-01 10:11:55.444603 |
pkg:github/koumbit/mailman2 |
purl2cpe | 2026-06-01 10:11:55.444605 |
pkg:github/mailman/mailman |
purl2cpe | 2026-06-01 10:11:55.444606 |
pkg:gitlab/mailman/mailman |
purl2cpe | 2026-06-01 10:11:55.444607 |
pkg:gnu/mailman |
purl2cpe | 2026-06-01 10:11:55.444609 |
pkg:pypi/mailman |
purl2cpe | 2026-06-01 10:11:55.444610 |
pkg:rpm/fedora/mailman |
purl2cpe | 2026-06-01 10:11:55.444611 |
pkg:rpm/opensuse/mailman |
purl2cpe | 2026-06-01 10:11:55.444613 |
pkg:sourceforge/mailman |
purl2cpe | 2026-06-01 10:11:55.444614 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-0707 |
vulnerable | 2026-06-08 04:56:38.741050 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Cgi/confirm.py in GNU Mailman 2.1.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) username field in a confirmation message.
Published: 2011-02-22T18:00:00.000Z
Updated: 2024-08-06T21:58:26.088Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3636 |
vulnerable | 2026-06-08 04:49:09.859104 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2006-09-06T00:00:00.000Z
Updated: 2024-08-07T18:39:53.576Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2941 |
vulnerable | 2026-06-08 04:49:07.935569 |
Details available
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers".
Published: 2006-09-06T00:00:00.000Z
Updated: 2024-08-07T18:06:27.218Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0052 |
vulnerable | 2026-06-08 04:48:45.827032 |
Details available
The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.
Published: 2006-03-31T11:00:00.000Z
Updated: 2024-08-07T16:18:20.931Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0202 |
vulnerable | 2026-06-08 04:48:11.791730 |
Details available
Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences.
Published: 2005-02-09T05:00:00.000Z
Updated: 2024-08-07T21:05:25.391Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1177 |
vulnerable | 2026-06-08 04:47:53.212660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1143 |
vulnerable | 2026-06-08 04:47:53.085620 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0412 |
vulnerable | 2026-06-08 04:47:49.735108 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.