high7.5
CVE-2006-2191
Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors.
Impact
Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Mailman | through 2.1.8 |
References
- NVD record
- CVE.org record
- http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html
- http://people.debian.org/~terpstra/message/20060906.155339.0c0732a4.en.html
- http://secunia.com/advisories/21732
- http://secunia.com/advisories/22639
- http://www.novell.com/linux/security/advisories/2006_25_sr.html
- http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html
- http://people.debian.org/~terpstra/message/20060906.155339.0c0732a4.en.html
- http://secunia.com/advisories/21732
- http://secunia.com/advisories/22639
- http://www.novell.com/linux/security/advisories/2006_25_sr.html