GNU Mailman Attachment Scrubber UTF8 Filename Denial Of Service Vulnerability

Threat level definition

GNU Mailman Attachment Scrubber UTF8 Filename Denial Of Service Vulnerability

Solution:
Please see the referenced advisories for more information.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.commailto:vuldb@securityfocus.com.

GNU Mailman 2.1.4

Mandriva mailman-2.1.4-2.5.C30mdk.i586.rpm
Corporate 3.0:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva mailman-2.1.4-2.5.C30mdk.x86_64.rpm
Corporate 3.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

GNU Mailman 2.1.5

Debian mailman_2.1.5-8sarge1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mailman/mailman_2.1.5-8 sarge1_alpha.deb

Debian mailman_2.1.5-8sarge1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mailman/mailman_2.1.5-8 sarge1_amd64.deb

Debian mailman_2.1.5-8sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mailman/mailman_2.1.5-8 sarge1_arm.deb

Debian mailman_2.1.5-8sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mailman/mailman_2.1.5-8 sarge1_hppa.deb

Debian mailman_2.1.5-8sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mailman/mailman_2.1.5-8 sarge1_i386.deb

Debian mailman_2.1.5-8sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mailman/mailman_2.1.5-8 sarge1_ia64.deb

Debian mailman_2.1.5-8sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mailman/mailman_2.1.5-8 sarge1_m68k.deb

Debian mailman_2.1.5-8sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mailman/mailman_2.1.5-8 sarge1_mips.deb

Debian mailman_2.1.5-8sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mailman/mailman_2.1.5-8 sarge1_mipsel.deb

Debian mailman_2.1.5-8sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mailman/mailman_2.1.5-8 sarge1_powerpc.deb

Debian mailman_2.1.5-8sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mailman/mailman_2.1.5-8 sarge1_s390.deb

Debian mailman_2.1.5-8sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mailman/mailman_2.1.5-8 sarge1_sparc.deb

Mandriva mailman-2.1.5-15.2.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva mailman-2.1.5-7.5.101mdk.x86_64.rpm
Mandriva Linux 10.1/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva mailman-2.1.5-15.2.102mdk.i586.rpm
Mandriva Linux 10.2:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva mailman-2.1.5-15.2.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva mailman-2.1.5-7.5.101mdk.i586.rpm
Mandriva Linux 10.1:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva mailman-2.1.5-7.5.101mdk.x86_64.rpm
Mandriva Linux 10.1/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Ubuntu mailman_2.1.5-1ubuntu2.2_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-1u buntu2.2_amd64.deb

Ubuntu mailman_2.1.5-1ubuntu2.2_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-1u buntu2.2_i386.deb

Ubuntu mailman_2.1.5-1ubuntu2.2_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-1u buntu2.2_powerpc.deb

Ubuntu mailman_2.1.5-1ubuntu2.3_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-1u buntu2.3_amd64.deb

Ubuntu mailman_2.1.5-1ubuntu2.3_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-1u buntu2.3_i386.deb

Ubuntu mailman_2.1.5-1ubuntu2.3_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-1u buntu2.3_powerpc.deb

Ubuntu mailman_2.1.5-1ubuntu2.4_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-1u buntu2.4_amd64.deb

Ubuntu mailman_2.1.5-1ubuntu2.4_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-1u buntu2.4_i386.deb

Ubuntu mailman_2.1.5-1ubuntu2.4_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-1u buntu2.4_powerpc.deb

Ubuntu mailman_2.1.5-1ubuntu2.5_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-1u buntu2.5_amd64.deb

Ubuntu mailman_2.1.5-1ubuntu2.5_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-1u buntu2.5_i386.deb

Ubuntu mailman_2.1.5-1ubuntu2.5_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-1u buntu2.5_powerpc.deb

Ubuntu mailman_2.1.5-7ubuntu0.1_amd64.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-7u buntu0.1_amd64.deb

Ubuntu mailman_2.1.5-7ubuntu0.1_i386.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-7u buntu0.1_i386.deb

Ubuntu mailman_2.1.5-7ubuntu0.1_powerpc.deb
Ubuntu 5.04 (Hoary Hedgehog)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-7u buntu0.1_powerpc.deb

Ubuntu mailman_2.1.5-8ubuntu2.1_amd64.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-8u buntu2.1_amd64.deb

Ubuntu mailman_2.1.5-8ubuntu2.1_i386.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-8u buntu2.1_i386.deb

Ubuntu mailman_2.1.5-8ubuntu2.1_powerpc.deb
Ubuntu 5.10 (Breezy Badger)
http://security.ubuntu.com/ubuntu/pool/main/m/mailman/mailman_2.1.5-8u buntu2.1_powerpc.deb

Privacy Statement
Copyright 2009, SecurityFocus