Test Kennung:	1.3.6.1.4.1.25623.1.0.891442
Kategorie:	Debian Local Security Checks
Titel:	Debian LTS: Security Advisory for mailman (DLA-1442-1)
Zusammenfassung:	Two flaws were discovered in mailman, a web-based mailing list manager.;;CVE-2018-0618;;Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc.;discovered that mailman is prone to a cross-site scripting flaw;allowing a malicious listowner to inject scripts into the listinfo;page, due to not validated input in the host_name field.;;CVE-2018-13796;;Hammad Qureshi discovered a content spoofing vulnerability with;invalid list name messages in the web UI.
Beschreibung:	Summary: Two flaws were discovered in mailman, a web-based mailing list manager. CVE-2018-0618 Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. discovered that mailman is prone to a cross-site scripting flaw allowing a malicious listowner to inject scripts into the listinfo page, due to not validated input in the host_name field. CVE-2018-13796 Hammad Qureshi discovered a content spoofing vulnerability with invalid list name messages in the web UI. Affected Software/OS: mailman on Debian Linux Solution: For Debian 8 'Jessie', these problems have been fixed in version 1:2.1.18-2+deb8u3. We recommend that you upgrade your mailman packages. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-0618 Debian Security Information: DSA-4246 (Google Search) https://www.debian.org/security/2018/dsa-4246 https://security.gentoo.org/glsa/201904-10 http://jvn.jp/en/jp/JVN00846677/index.html https://lists.debian.org/debian-lts-announce/2018/07/msg00034.html https://mail.python.org/pipermail/mailman-announce/2018-June/000236.html https://usn.ubuntu.com/4348-1/
Copyright	Copyright (C) 2018 Greenbone Networks GmbH http://greenbone.net

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.