ByteOS Network

CVE Vulnerability Details :

CVE-2006-4624

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-07 Sep, 2006 | 19:00

Updated At-07 Aug, 2024 | 19:14

▼CVE Numbering Authority (CNA)

CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the error log and possibly trick the administrator into visiting malicious URLs via CRLF sequences in the URI.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.vupen.com/english/advisories/2006/3446	vdb-entry x_refsource_VUPEN
http://www.debian.org/security/2006/dsa-1188	vendor-advisory x_refsource_DEBIAN
http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html	mailing-list x_refsource_MLIST
http://www.securityfocus.com/bid/19831	vdb-entry x_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/28734	vdb-entry x_refsource_XF
http://secunia.com/advisories/22639	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/20021	vdb-entry x_refsource_BID
http://www.redhat.com/support/errata/RHSA-2007-0779.html	vendor-advisory x_refsource_REDHAT
http://security.gentoo.org/glsa/glsa-200609-12.xml	vendor-advisory x_refsource_GENTOO
http://www.securityfocus.com/archive/1/445992/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://svn.sourceforge.net/viewvc/mailman/trunk/mailman/Mailman/Utils.py?r1=7859&r2=7923	x_refsource_MISC
http://secunia.com/advisories/27669	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/22227	third-party-advisory x_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2006_25_sr.html	vendor-advisory x_refsource_SUSE
http://www.mandriva.com/security/advisories?name=MDKSA-2006:165	vendor-advisory x_refsource_MANDRIVA
http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295	x_refsource_CONFIRM
http://secunia.com/advisories/21732	third-party-advisory x_refsource_SECUNIA
http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt	x_refsource_MISC
http://secunia.com/advisories/22011	third-party-advisory x_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9756	vdb-entry signature x_refsource_OVAL
http://secunia.com/advisories/22020	third-party-advisory x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2006/3446

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.debian.org/security/2006/dsa-1188

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.securityfocus.com/bid/19831

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/28734

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://secunia.com/advisories/22639

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/bid/20021

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.redhat.com/support/errata/RHSA-2007-0779.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://security.gentoo.org/glsa/glsa-200609-12.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.securityfocus.com/archive/1/445992/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://svn.sourceforge.net/viewvc/mailman/trunk/mailman/Mailman/Utils.py?r1=7859&r2=7923

Resource:

x_refsource_MISC

Hyperlink: http://secunia.com/advisories/27669

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/22227

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.novell.com/linux/security/advisories/2006_25_sr.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.mandriva.com/security/advisories?name=MDKSA-2006:165

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/21732

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt

Resource:

x_refsource_MISC

Hyperlink: http://secunia.com/advisories/22011

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9756

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://secunia.com/advisories/22020

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.vupen.com/english/advisories/2006/3446	vdb-entry x_refsource_VUPEN x_transferred
http://www.debian.org/security/2006/dsa-1188	vendor-advisory x_refsource_DEBIAN x_transferred
http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html	mailing-list x_refsource_MLIST x_transferred
http://www.securityfocus.com/bid/19831	vdb-entry x_refsource_BID x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/28734	vdb-entry x_refsource_XF x_transferred
http://secunia.com/advisories/22639	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/bid/20021	vdb-entry x_refsource_BID x_transferred
http://www.redhat.com/support/errata/RHSA-2007-0779.html	vendor-advisory x_refsource_REDHAT x_transferred
http://security.gentoo.org/glsa/glsa-200609-12.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://www.securityfocus.com/archive/1/445992/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://svn.sourceforge.net/viewvc/mailman/trunk/mailman/Mailman/Utils.py?r1=7859&r2=7923	x_refsource_MISC x_transferred
http://secunia.com/advisories/27669	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/22227	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.novell.com/linux/security/advisories/2006_25_sr.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.mandriva.com/security/advisories?name=MDKSA-2006:165	vendor-advisory x_refsource_MANDRIVA x_transferred
http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/21732	third-party-advisory x_refsource_SECUNIA x_transferred
http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt	x_refsource_MISC x_transferred
http://secunia.com/advisories/22011	third-party-advisory x_refsource_SECUNIA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9756	vdb-entry signature x_refsource_OVAL x_transferred
http://secunia.com/advisories/22020	third-party-advisory x_refsource_SECUNIA x_transferred