CVE-2003-0965

Advisory

Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• http://mail.python.org/pipermail/mailman-announce/2003-December/000066.html
• http://www.securityfocus.com/bid/9336
• http://www.redhat.com/support/errata/RHSA-2004-020.html
• http://www.debian.org/security/2004/dsa-436
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:013
• http://www.osvdb.org/3305
• http://secunia.com/advisories/10519
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14121
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A813
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0965