CVE-2010-3089
published 2010-09-15CVE-2010-3089: Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via…
PriorityP413low3.5CVSS 2.0
AVNACMAuSCNIPAN
EPSS
1.97%
78.4th percentile
Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) the list information field or (2) the list description field.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnu | mailman | <= 2.1.13 | — |
| gnu | mailman | — | — |
| gnu | mailman | — | — |
| gnu | mailman | — | — |
| gnu | mailman | — | — |
| gnu | mailman | — | — |
| gnu | mailman | — | — |
| gnu | mailman | — | — |
| gnu | mailman | — | — |
| gnu | mailman | — | — |
| gnu | mailman | — | — |
| gnu | mailman | — | — |
| gnu | mailman | — | — |
| gnu | mailman | — | — |
| gnu | mailman | — | — |
CVSS provenance
nvdv2.03.5LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
vendor_redhat3.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Mailman vulnerabilities
vendor_ubuntu·2011-02-22
CVE-2010-3089 Mailman vulnerabilities
Title: Mailman vulnerabilities
It was discovered that Mailman did not properly sanitize certain fields,
resulting in cross-site scripting (XSS) vulnerabilities. With cross-site
scripting vulnerabilities, if a user were tricked into viewing server
output during a crafted server request, a remote attacker could exploit
this to modify the contents, or steal confidential data, within the same
domain.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks
vendor_redhat·2010-09-09·CVSS 3.5
CVE-2010-3089 [LOW] CWE-79 mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks
mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks
Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) the list information field or (2) the list description field.
Statement: The Red Hat Security Response Team has rated this issue as having low security
impact, a future update may address this flaw.
GHSA
GHSA-4jm4-7jcw-x46f: Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2
ghsa_unreviewed·2022-05-17
CVE-2010-3089 [LOW] CWE-79 GHSA-4jm4-7jcw-x46f: Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2
Multiple cross-site scripting (XSS) vulnerabilities in GNU Mailman before 2.1.14rc1 allow remote authenticated users to inject arbitrary web script or HTML via vectors involving (1) the list information field or (2) the list description field.
Suricata
ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum UNION SELECT
suricata·2010-07-30·CVSS 6.0
CVE-2006-6911 [MEDIUM] ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum UNION SELECT
ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum UNION SELECT
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum UNION SELECT"; flow:established,to_server; http.uri; content:"/search.asp?"; nocase; content:"ordernum="; nocase; content:"UNION"; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2006-6911; reference:url,www.milw0rm.com/exploits/3089; classtype:web-application-attack; sid:2005896; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mit
Suricata
ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum ASCII
suricata·2010-07-30·CVSS 6.0
CVE-2006-6911 [MEDIUM] ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum ASCII
ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum ASCII
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum ASCII"; flow:established,to_server; http.uri; content:"/search.asp?"; nocase; content:"ordernum="; nocase; content:"ASCII("; nocase; content:"SELECT"; nocase; distance:0; reference:cve,CVE-2006-6911; reference:url,www.milw0rm.com/exploits/3089; classtype:web-application-attack; sid:2005899; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id
Suricata
ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum SELECT
suricata·2010-07-30·CVSS 6.0
CVE-2006-6911 [MEDIUM] ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum SELECT
ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum SELECT
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum SELECT"; flow:established,to_server; http.uri; content:"/search.asp?"; nocase; content:"ordernum="; nocase; content:"SELECT"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2006-6911; reference:url,www.milw0rm.com/exploits/3089; classtype:web-application-attack; sid:2005895; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id
Suricata
ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum DELETE
suricata·2010-07-30·CVSS 6.0
CVE-2006-6911 [MEDIUM] ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum DELETE
ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum DELETE
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum DELETE"; flow:established,to_server; http.uri; content:"/search.asp?"; nocase; content:"ordernum="; nocase; content:"DELETE"; nocase; content:"FROM"; nocase; distance:0; reference:cve,CVE-2006-6911; reference:url,www.milw0rm.com/exploits/3089; classtype:web-application-attack; sid:2005898; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id
Suricata
ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum INSERT
suricata·2010-07-30·CVSS 6.0
CVE-2006-6911 [MEDIUM] ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum INSERT
ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum INSERT
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum INSERT"; flow:established,to_server; http.uri; content:"/search.asp?"; nocase; content:"ordernum="; nocase; content:"INSERT"; nocase; content:"INTO"; nocase; distance:0; reference:cve,CVE-2006-6911; reference:url,www.milw0rm.com/exploits/3089; classtype:web-application-attack; sid:2005897; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id
Suricata
ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum UPDATE
suricata·2010-07-30·CVSS 6.0
CVE-2006-6911 [MEDIUM] ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum UPDATE
ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum UPDATE
Rule: alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Digitizing Quote And Ordering System SQL Injection Attempt -- search.asp ordernum UPDATE"; flow:established,to_server; http.uri; content:"/search.asp?"; nocase; content:"ordernum="; nocase; content:"UPDATE"; nocase; content:"SET"; nocase; distance:0; reference:cve,CVE-2006-6911; reference:url,www.milw0rm.com/exploits/3089; classtype:web-application-attack; sid:2005900; rev:9; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2010_07_30, deployment Datacenter, confidence Medium, signature_severity Major, tag SQL_Injection, updated_at 2020_09_11, mitre_tactic_id T
No public exploits indexed.
Bugzilla
CVE-2010-3089 Mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks [fedora-all]
bugzilla·2010-09-14·CVSS 3.5
CVE-2010-3089 [LOW] CVE-2010-3089 Mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks [fedora-all]
CVE-2010-3089 Mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product.
Please mention CVE ids in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=631881
Please no
Bugzilla
Mailman: Cross-site scripting (XSS) in list information overview
bugzilla·2010-09-08·CVSS 3.5
[LOW] Mailman: Cross-site scripting (XSS) in list information overview
Mailman: Cross-site scripting (XSS) in list information overview
A security flaw was found in the way Mailman mailing list
manager sanitized mailing list description by presenting
general mailing list information. A remote mailing list
owner could use this flaw to conduct cross-site scripting
(XSS) attacks (execute arbitrary HTML or scripting code).
References:
[1] http://mail.python.org/pipermail/mailman-announce/2010-September/000150.html
Discussion:
This issue affects the versions of the mailman package, as shipped
with Red Hat Enterprise Linux 3, 4, and 5.
--
This issue affects the versions of the mailman package, as shipped
with Fedora release of 12 and 13.
---
Public via: http://mail.python.org/pipermail/mailman-announce/2010-September/000151.html
---
This issue has been as
Bugzilla
CVE-2010-3089 mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks
bugzilla·2010-09-08·CVSS 3.5
CVE-2010-3089 [LOW] CVE-2010-3089 mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks
CVE-2010-3089 mailman: Multiple security flaws leading to cross-site scripting (XSS) attacks
Multiple security flaws leading to cross-site scripting (XSS) attacks (execute arbitrary HTML or scripting code) were found in mailman.
1. A security flaw was found in the way Mailman mailing list
manager sanitized content of mailing list information HTML
template, prior rendering it to the user. A remote mailing
list owner could use this flaw to conduct cross-site scripting
(XSS) attacks (execute arbitrary HTML or scripting code)
when the modified "listinfo" html page is viewed by the user.
2. A security flaw was found in the way Mailman mailing list
manager sanitized mailing list description by presenting
general mailing list information. A remote mailing list
owner could use this flaw to cond
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-December/052297.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-December/052312.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.htmlhttp://lists.opensuse.org/opensuse-updates/2011-05/msg00000.htmlhttp://mail.python.org/pipermail/mailman-announce/2010-September/000150.htmlhttp://mail.python.org/pipermail/mailman-announce/2010-September/000151.htmlhttp://marc.info/?l=oss-security&m=128438736513097&w=2http://marc.info/?l=oss-security&m=128440851513718&w=2http://marc.info/?l=oss-security&m=128441135117819&w=2http://marc.info/?l=oss-security&m=128441237618793&w=2http://marc.info/?l=oss-security&m=128441369020123&w=2http://secunia.com/advisories/41265http://secunia.com/advisories/42502http://secunia.com/advisories/43294http://secunia.com/advisories/43425http://secunia.com/advisories/43549http://secunia.com/advisories/43580http://support.apple.com/kb/HT4581http://www.debian.org/security/2011/dsa-2170http://www.redhat.com/support/errata/RHSA-2011-0307.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0308.htmlhttp://www.ubuntu.com/usn/USN-1069-1http://www.vupen.com/english/advisories/2010/3271http://www.vupen.com/english/advisories/2011/0436http://www.vupen.com/english/advisories/2011/0460http://www.vupen.com/english/advisories/2011/0542https://bugzilla.redhat.com/show_bug.cgi?id=631859https://bugzilla.redhat.com/show_bug.cgi?id=631881https://launchpad.net/mailman/+milestone/2.1.14rc1http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-December/052297.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-December/052312.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.htmlhttp://lists.opensuse.org/opensuse-updates/2011-05/msg00000.htmlhttp://mail.python.org/pipermail/mailman-announce/2010-September/000150.htmlhttp://mail.python.org/pipermail/mailman-announce/2010-September/000151.htmlhttp://marc.info/?l=oss-security&m=128438736513097&w=2http://marc.info/?l=oss-security&m=128440851513718&w=2http://marc.info/?l=oss-security&m=128441135117819&w=2http://marc.info/?l=oss-security&m=128441237618793&w=2http://marc.info/?l=oss-security&m=128441369020123&w=2http://secunia.com/advisories/41265http://secunia.com/advisories/42502http://secunia.com/advisories/43294http://secunia.com/advisories/43425http://secunia.com/advisories/43549http://secunia.com/advisories/43580http://support.apple.com/kb/HT4581http://www.debian.org/security/2011/dsa-2170http://www.redhat.com/support/errata/RHSA-2011-0307.htmlhttp://www.redhat.com/support/errata/RHSA-2011-0308.htmlhttp://www.ubuntu.com/usn/USN-1069-1http://www.vupen.com/english/advisories/2010/3271http://www.vupen.com/english/advisories/2011/0436http://www.vupen.com/english/advisories/2011/0460http://www.vupen.com/english/advisories/2011/0542https://bugzilla.redhat.com/show_bug.cgi?id=631859https://bugzilla.redhat.com/show_bug.cgi?id=631881https://launchpad.net/mailman/+milestone/2.1.14rc1
2010-09-15
Published