OESA-2021-1405

Dashboard / Vulnerabilities / OESA-2021-1405

OESA-2021-1405

Summary: mailman security update

Details: Mailman is free software for managing electronic mail discussion and e-newsletter lists. Mailman is integrated with the web, making it easy for users to manage their accounts and for list owners to administer their lists. Mailman supports built-in archiving, automatic bounce processing, content filtering, digest delivery, spam filters, and more. Security Fix(es): /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.(CVE-2020-12108) GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing, conclude that the MIME type should have been text/html, and execute JavaScript code.(CVE-2020-12137) GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.(CVE-2020-15011) GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is derived from the admin password, and may be useful in conducting a brute-force attack against that password.(CVE-2021-42096) GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin (e.g., for account takeover).(CVE-2021-42097)

References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1405, https://nvd.nist.gov/vuln/detail/CVE-2020-12108, https://nvd.nist.gov/vuln/detail/CVE-2020-12137, https://nvd.nist.gov/vuln/detail/CVE-2020-15011, https://nvd.nist.gov/vuln/detail/CVE-2021-42096, https://nvd.nist.gov/vuln/detail/CVE-2021-42097