CVE-2003-0991

Description

Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service (crash) via malformed e-mail commands.

Affected products

• gnu / Mailman1.0 – 1.0
• gnu / Mailman1.1 – 1.1
• gnu / Mailman2.0 – 2.0
• gnu / Mailman2.0 – 2.0
• gnu / Mailman2.0 – 2.0
• gnu / Mailman2.0 – 2.0
• gnu / Mailman2.0.1 – 2.0.1
• gnu / Mailman2.0.2 – 2.0.2
• gnu / Mailman2.0.3 – 2.0.3
• gnu / Mailman2.0.4 – 2.0.4
• gnu / Mailman2.0.5 – 2.0.5
• gnu / Mailman2.0.6 – 2.0.6
• gnu / Mailman2.0.7 – 2.0.7
• gnu / Mailman2.0.8 – 2.0.8
• gnu / Mailman2.0.9 – 2.0.9
• gnu / Mailman2.0.10 – 2.0.10
• gnu / Mailman2.0.11 – 2.0.11
• gnu / Mailman2.0.12 – 2.0.12
• gnu / Mailman2.0.13 – 2.0.13
• gnu / Mailman2.1 – 2.1
• sgi / propack2.3 – 2.3

References

• VENDOR_ADVISORYftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc
• MISChttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842
• VENDOR_ADVISORYhttp://www.debian.org/security/2004/dsa-436
• MISChttp://www.securityfocus.com/bid/9620
• MISChttp://www.redhat.com/support/errata/RHSA-2004-019.html
• VENDOR_ADVISORYhttp://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:013
• MAILING_LISThttp://mail.python.org/pipermail/mailman-announce/2004-February/000067.html
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/15106