CVE-2010-3089

N/A

Description

Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) the list information field or (2) the list description field.

CVE Details

CVSS v3.1 ScoreN/A

Published9/15/2010

Last Modified4/29/2026

Sourcenvd

Honeypot Sightings0

Affected Products

gnu:mailman

Weaknesses (CWE)

CWE-79

References

http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html(secalert@redhat.com)

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052297.html(secalert@redhat.com)

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052312.html(secalert@redhat.com)

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html(secalert@redhat.com)

http://lists.opensuse.org/opensuse-updates/2011-05/msg00000.html(secalert@redhat.com)

http://mail.python.org/pipermail/mailman-announce/2010-September/000150.html(secalert@redhat.com)

http://mail.python.org/pipermail/mailman-announce/2010-September/000151.html(secalert@redhat.com)

http://marc.info/?l=oss-security&m=128438736513097&w=2(secalert@redhat.com)

http://marc.info/?l=oss-security&m=128440851513718&w=2(secalert@redhat.com)

http://marc.info/?l=oss-security&m=128441135117819&w=2(secalert@redhat.com)

http://marc.info/?l=oss-security&m=128441237618793&w=2(secalert@redhat.com)

http://marc.info/?l=oss-security&m=128441369020123&w=2(secalert@redhat.com)

http://secunia.com/advisories/41265(secalert@redhat.com)

http://secunia.com/advisories/42502(secalert@redhat.com)

http://secunia.com/advisories/43294(secalert@redhat.com)

http://secunia.com/advisories/43425(secalert@redhat.com)

http://secunia.com/advisories/43549(secalert@redhat.com)

http://secunia.com/advisories/43580(secalert@redhat.com)

http://support.apple.com/kb/HT4581(secalert@redhat.com)

http://www.debian.org/security/2011/dsa-2170(secalert@redhat.com)

http://www.redhat.com/support/errata/RHSA-2011-0307.html(secalert@redhat.com)

http://www.redhat.com/support/errata/RHSA-2011-0308.html(secalert@redhat.com)

http://www.ubuntu.com/usn/USN-1069-1(secalert@redhat.com)

http://www.vupen.com/english/advisories/2010/3271(secalert@redhat.com)

http://www.vupen.com/english/advisories/2011/0436(secalert@redhat.com)

http://www.vupen.com/english/advisories/2011/0460(secalert@redhat.com)

http://www.vupen.com/english/advisories/2011/0542(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=631859(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=631881(secalert@redhat.com)

https://launchpad.net/mailman/+milestone/2.1.14rc1(secalert@redhat.com)

http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052297.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052312.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-updates/2011-05/msg00000.html(af854a3a-2127-422b-91ae-364da2661108)

http://mail.python.org/pipermail/mailman-announce/2010-September/000150.html(af854a3a-2127-422b-91ae-364da2661108)

http://mail.python.org/pipermail/mailman-announce/2010-September/000151.html(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=oss-security&m=128438736513097&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=oss-security&m=128440851513718&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=oss-security&m=128441135117819&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=oss-security&m=128441237618793&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://marc.info/?l=oss-security&m=128441369020123&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/41265(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/42502(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/43294(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/43425(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/43549(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/43580(af854a3a-2127-422b-91ae-364da2661108)

http://support.apple.com/kb/HT4581(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2011/dsa-2170(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2011-0307.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2011-0308.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-1069-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2010/3271(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2011/0436(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2011/0460(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2011/0542(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=631859(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=631881(af854a3a-2127-422b-91ae-364da2661108)

https://launchpad.net/mailman/+milestone/2.1.14rc1(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.