• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

GNU Mailman Cross-Site Scripting Vulnerability

Solution:
The vendor has addressed this issue in Mailman 2.0.8.


GNU Mailman 1.1

• Debian 2.2 alpha mailman_1.1-10_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/mail man_1.1-10_alpha.deb


• Debian 2.2 arm mailman_1.1-10_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/mailma n_1.1-10_arm.deb


• Debian 2.2 i386 mailman_1.1-10_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/mailm an_1.1-10_i386.deb


• Debian 2.2 m68k mailman_1.1-10_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/mailm an_1.1-10_m68k.deb


• Debian 2.2 ppc mailman_1.1-10_powerpc.deb
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/ma ilman_1.1-10_powerpc.deb


• Debian 2.2 sparc mailman_1.1-10_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/mail man_1.1-10_sparc.deb

GNU Mailman 2.0

• GNU mailman-2.0.8.tgz
  http://prdownloads.sourceforge.net/mailman/mailman-2.0.8.tgz

GNU Mailman 2.0 .1

• GNU mailman-2.0.8.tgz
  http://prdownloads.sourceforge.net/mailman/mailman-2.0.8.tgz

GNU Mailman 2.0 beta3

• Conectiva 5.0 i386 mailman-2.0.8-2U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.0/i386/mailman-2.0.8-2U50_1cl.i3 86.rpm


• Conectiva 5.1 i386 mailman-2.0.8-2U51_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.1/i386/mailman-2.0.8-2U51_1cl.i3 86.rpm

GNU Mailman 2.0 .3

• GNU mailman-2.0.8.tgz
  http://prdownloads.sourceforge.net/mailman/mailman-2.0.8.tgz

GNU Mailman 2.0 .7

• GNU mailman-2.0.8.tgz
  http://prdownloads.sourceforge.net/mailman/mailman-2.0.8.tgz

GNU Mailman 2.0 .2

• GNU mailman-2.0.8.tgz
  http://prdownloads.sourceforge.net/mailman/mailman-2.0.8.tgz

GNU Mailman 2.0 beta5

• Conectiva 6.0 i386 mailman-2.0.8-2U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/mailman-2.0.8-2U60_1cl.i3 86.rpm


• RedHat mailman-2.0.8-0.6.2.i386.rpm
  ftp://updates.redhat.com/other_prod/secureweb/3.2/i386/mailman-2.0.8-0 .6.2.i386.rpm

GNU Mailman 2.0 .6

• GNU mailman-2.0.8.tgz
  http://prdownloads.sourceforge.net/mailman/mailman-2.0.8.tgz


• Red Hat 7.2 i386 mailman-2.0.8-1.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/mailman-2.0.8-1.i386.rpm

GNU Mailman 2.0 .5

• GNU mailman-2.0.8.tgz
  http://prdownloads.sourceforge.net/mailman/mailman-2.0.8.tgz