CVE-2006-0052
Fixed in a distro release EPSS 3%
The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.
Products: gnu mailman
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | mailman | 2.1.5-8sarge2 |
| Red Hat Enterprise Linux 3 | mailman | 3:2.1.5.1-25.rhel3.5 |
| Red Hat Enterprise Linux 3 | mailman-debuginfo | 3:2.1.5.1-25.rhel3.5 |
| Red Hat Enterprise Linux 4 | mailman | 3:2.1.5.1-34.rhel4.3 |
| Red Hat Enterprise Linux 4 | mailman-debuginfo | 3:2.1.5.1-34.rhel4.3 |