Detections
Analytics
FreeBSD : mailman -- script insertion vulnerability (f47f2746-12c5-11dd-bab7-0016179b2dd5)
medium Nessus Plugin ID 32071
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
Secunia reports :A vulnerability has been reported in Mailman, which can be exploited by malicious users to conduct script insertion attacks.
Certain input when editing the list templates and the list info attribute is not properly sanitised before being stored. This can be exploited to insert arbitrary HTML and script code, which is executed in a user's browser session in context of an affected site when the malicious website is accessed.
Solution
Update the affected packages.See Also
Plugin Details
Severity: Medium
ID: 32071
File Name: freebsd_pkg_f47f274612c511ddbab70016179b2dd5.nasl
Version: 1.17
Type: local
Family: FreeBSD Local Security Checks
Published: 4/28/2008
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.0
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.2
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:ja-mailman, p-cpe:/a:freebsd:freebsd:mailman, p-cpe:/a:freebsd:freebsd:mailman-with-htdig, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Exploit Ease: No known exploits are available
Patch Publication Date: 4/25/2008
Vulnerability Publication Date: 2/5/2008
Reference Information
CVE: CVE-2008-0564
BID: 27630