CVE-2005-3573
Fixed in a distro release EPSS 3%
Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).
Products: gnu mailman
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | mailman | 2.1.5-8sarge1 |
| Red Hat Enterprise Linux 3 | mailman | 3:2.1.5.1-25.rhel3.4 |
| Red Hat Enterprise Linux 3 | mailman-debuginfo | 3:2.1.5.1-25.rhel3.4 |
| Red Hat Enterprise Linux 4 | mailman | 3:2.1.5.1-34.rhel4.2 |
| Red Hat Enterprise Linux 4 | mailman-debuginfo | 3:2.1.5.1-34.rhel4.2 |