Detections
Analytics
Mailman < 2.1.14 Multiple XSS
low Nessus Plugin ID 54579
Language:
Synopsis
A web application on the remote host has multiple cross-site scripting vulnerabilities.Description
According to its self-reported version number, the Mailman installation running on the remote host has multiple cross-site scripting vulnerabilities. These vulnerabilities can reportedly only be exploited by a list owner.A malicious list owner could exploit these issues to execute arbitrary script code in another user's browser.
Solution
Upgrade to Mailman 2.1.14 or later.See Also
Plugin Details
Severity: Low
ID: 54579
File Name: mailman_2_1_14.nasl
Version: 1.10
Type: remote
Family: CGI abuses : XSS
Published: 5/19/2011
Updated: 6/4/2024
Configuration: Enable paranoid mode, Enable thorough checks
Supported Sensors: Nessus
Enable CGI Scanning: true
Risk Information
VPR
Risk Factor: Low
Score: 3.0
CVSS v2
Risk Factor: Low
Base Score: 3.5
Temporal Score: 3
Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:gnu:mailman
Required KB Items: Settings/ParanoidReport, www/Mailman
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Patch Publication Date: 9/9/2010
Vulnerability Publication Date: 9/5/2010
Reference Information
CVE: CVE-2010-3089
BID: 43187