Vulnerability-Lookup

CVE-2005-3573 (GCVE-0-2005-3573)

Vulnerability from cvelistv5 – Published: 2005-11-16 07:37 – Updated: 2024-08-07 23:17

Summary

Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

23 references

URL	Tags
http://secunia.com/advisories/19167	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-242-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/18503	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2005/2404	vdb-entryx_refsource_VUPEN
ftp://patches.sgi.com/support/free/security/advis…	vendor-advisoryx_refsource_SGI
http://www.trustix.org/errata/2006/0012/	vendor-advisoryx_refsource_TRUSTIX
http://www.redhat.com/support/errata/RHSA-2006-02…	vendor-advisoryx_refsource_REDHAT
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.osvdb.org/20819	vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/18456	third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1015735	vdb-entryx_refsource_SECTRACK
http://lists.suse.com/archive/suse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/17874	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19532	third-party-advisoryx_refsource_SECUNIA
http://wwwnew.mandriva.com/security/advisories?na…	vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/bid/15408	vdb-entryx_refsource_BID
http://secunia.com/advisories/18612	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17511	third-party-advisoryx_refsource_SECUNIA
http://mail.python.org/pipermail/mailman-users/20…	mailing-listx_refsource_MLIST
http://secunia.com/advisories/19196	third-party-advisoryx_refsource_SECUNIA
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732	x_refsource_CONFIRM
http://www.debian.org/security/2006/dsa-955	vendor-advisoryx_refsource_DEBIAN

Date Public

2005-11-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:17:23.414Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "19167",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19167"
          },
          {
            "name": "USN-242-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-242-1"
          },
          {
            "name": "18503",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18503"
          },
          {
            "name": "ADV-2005-2404",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2404"
          },
          {
            "name": "20060401-01-U",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U"
          },
          {
            "name": "2006-0012",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2006/0012/"
          },
          {
            "name": "RHSA-2006:0204",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0204.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10038",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038"
          },
          {
            "name": "20819",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/20819"
          },
          {
            "name": "mailman-utf8-scrubber-dos(23139)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139"
          },
          {
            "name": "18456",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18456"
          },
          {
            "name": "1015735",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015735"
          },
          {
            "name": "SUSE-SR:2006:001",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html"
          },
          {
            "name": "17874",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17874"
          },
          {
            "name": "19532",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19532"
          },
          {
            "name": "MDKSA-2005:222",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222"
          },
          {
            "name": "15408",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15408"
          },
          {
            "name": "18612",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18612"
          },
          {
            "name": "17511",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17511"
          },
          {
            "name": "[Mailman-Users] 20050912 Uncaught runner exception: \u0027utf8\u0027 codeccan\u0027tdecode bytes in position 1-4: invalid data",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://mail.python.org/pipermail/mailman-users/2005-September/046523.html"
          },
          {
            "name": "19196",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19196"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732"
          },
          {
            "name": "DSA-955",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-955"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-11-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "19167",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19167"
        },
        {
          "name": "USN-242-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-242-1"
        },
        {
          "name": "18503",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18503"
        },
        {
          "name": "ADV-2005-2404",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2404"
        },
        {
          "name": "20060401-01-U",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U"
        },
        {
          "name": "2006-0012",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2006/0012/"
        },
        {
          "name": "RHSA-2006:0204",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0204.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10038",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038"
        },
        {
          "name": "20819",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/20819"
        },
        {
          "name": "mailman-utf8-scrubber-dos(23139)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139"
        },
        {
          "name": "18456",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18456"
        },
        {
          "name": "1015735",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015735"
        },
        {
          "name": "SUSE-SR:2006:001",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html"
        },
        {
          "name": "17874",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17874"
        },
        {
          "name": "19532",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19532"
        },
        {
          "name": "MDKSA-2005:222",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222"
        },
        {
          "name": "15408",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15408"
        },
        {
          "name": "18612",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18612"
        },
        {
          "name": "17511",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17511"
        },
        {
          "name": "[Mailman-Users] 20050912 Uncaught runner exception: \u0027utf8\u0027 codeccan\u0027tdecode bytes in position 1-4: invalid data",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://mail.python.org/pipermail/mailman-users/2005-September/046523.html"
        },
        {
          "name": "19196",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19196"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732"
        },
        {
          "name": "DSA-955",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-955"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3573",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "19167",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19167"
            },
            {
              "name": "USN-242-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-242-1"
            },
            {
              "name": "18503",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18503"
            },
            {
              "name": "ADV-2005-2404",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2404"
            },
            {
              "name": "20060401-01-U",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U"
            },
            {
              "name": "2006-0012",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2006/0012/"
            },
            {
              "name": "RHSA-2006:0204",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0204.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10038",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038"
            },
            {
              "name": "20819",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/20819"
            },
            {
              "name": "mailman-utf8-scrubber-dos(23139)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139"
            },
            {
              "name": "18456",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18456"
            },
            {
              "name": "1015735",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015735"
            },
            {
              "name": "SUSE-SR:2006:001",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html"
            },
            {
              "name": "17874",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17874"
            },
            {
              "name": "19532",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19532"
            },
            {
              "name": "MDKSA-2005:222",
              "refsource": "MANDRIVA",
              "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222"
            },
            {
              "name": "15408",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15408"
            },
            {
              "name": "18612",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18612"
            },
            {
              "name": "17511",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17511"
            },
            {
              "name": "[Mailman-Users] 20050912 Uncaught runner exception: \u0027utf8\u0027 codeccan\u0027tdecode bytes in position 1-4: invalid data",
              "refsource": "MLIST",
              "url": "http://mail.python.org/pipermail/mailman-users/2005-September/046523.html"
            },
            {
              "name": "19196",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19196"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732"
            },
            {
              "name": "DSA-955",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-955"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3573",
    "datePublished": "2005-11-16T07:37:00.000Z",
    "dateReserved": "2005-11-16T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:17:23.414Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2005-3573",
      "date": "2026-09-23",
      "epss": "0.02714",
      "percentile": "0.85383"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0:beta3:*:*:*:*:*:*",
                    "matchCriteriaId": "EC6B30F6-70A8-43C7-BA5C-6DD8A6ED829D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0:beta4:*:*:*:*:*:*",
                    "matchCriteriaId": "767101D3-ABB0-4D34-AA28-75F78A392F39",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0:beta5:*:*:*:*:*:*",
                    "matchCriteriaId": "BEB60D06-E9D0-4949-8542-334D180F491D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7F884774-D1A1-42A6-A3FE-9B0500725666",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2C56B981-FD66-46F2-806A-3FFDEC520482",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5E3E1994-6CAC-48E9-8438-0D894A76FE66",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DB8742B0-A91D-457D-BF57-06AFC5219BF9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6F04EDBE-4B04-4B4C-A2BE-5286AC7C8952",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "615566E3-9EBD-49B3-9727-0883D3F0334B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F59D0CCF-3CD0-4D99-B1F1-38F331422801",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FADF5CE8-D072-4CFE-8A96-BA86187B478B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "72278005-5F2A-4459-8813-DF7EC2D1F063",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4E39A909-E266-4BA9-87C6-DE26052433E9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ABA16FD9-0625-4D3D-9F10-130A28C88DA2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.12:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EE33EFBF-E155-4C3B-93CC-63AA1266A8A2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.13:*:*:*:*:*:*:*",
                    "matchCriteriaId": "78F2FB70-7EB9-4AA7-9E85-C151C3CC8104",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.0.14:*:*:*:*:*:*:*",
                    "matchCriteriaId": "47F9AC7B-C0EB-4B7F-8997-1491301D0EF0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B1D6A976-FFEA-4DB6-B002-8036E778C78E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.1.1:beta1:*:*:*:*:*:*",
                    "matchCriteriaId": "9D3AFFFD-1BDC-4511-9DA0-56ACD337F56C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0B1500D8-952A-46C6-920C-096760C36A43",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "503D7346-4891-40B1-A0CD-0FACC5359431",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "643610C6-99A9-43C9-A8FC-463A244C08DE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "45C53260-503F-4934-B1FE-9FACD8E0EE66",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:gnu:mailman:2.1.5.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C670F583-6B60-4D80-A75F-CD53FDDF27D9",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash)."
          }
        ],
        "id": "CVE-2005-3573",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 5.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2005-11-16T07:42:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://mail.python.org/pipermail/mailman-users/2005-September/046523.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17511"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/17874"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/18456"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/18503"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/18612"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/19167"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/19196"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/19532"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://securitytracker.com/id?1015735"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.debian.org/security/2006/dsa-955"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.osvdb.org/20819"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0204.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/15408"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.trustix.org/errata/2006/0012/"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.ubuntu.com/usn/usn-242-1"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2005/2404"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://mail.python.org/pipermail/mailman-users/2005-September/046523.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/17511"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/17874"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/18456"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/18503"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/18612"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/19167"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/19196"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/19532"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1015735"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2006/dsa-955"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.osvdb.org/20819"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0204.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/15408"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.trustix.org/errata/2006/0012/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.ubuntu.com/usn/usn-242-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2005/2404"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T13:27:44+00:00",
      "cve": "CVE-2005-3573",
      "id": "CVE-2005-3573",
      "initial_release_date": "2005-09-12T00:00:00+00:00",
      "product_status:fixed": "104",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "security flaw",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2005/cve-2005-3573.json",
      "version": "3"
    }
  }
}

CERTA-2006-AVI-106

Vulnerability from certfr_avis - Published: 2006-03-13 - Updated: 2006-04-04

Plusieurs vulnérabilités dans Mailman permettent à un utilisateur mal intentionné de réaliser des déni de service.

Description

Mailman est un logiciel permettant la gestion des listes de diffusion.
Deux vulnérabilités dans Mailman permettent à un utilisateur mal intentionné de réaliser des déni de service sur la plate-forme vulnérable en provoquant l'arrêt brutal du service.

Solution

Mettre à jour Mailman en version 2.1.7.
Dans tous les cas, se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Mailman, versions antérieures à la version 2.1.7.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

FKIE_CVE-2005-3573

Vulnerability from fkie_nvd - Published: 2005-11-16 07:42 - Updated: 2026-06-16 22:17

Severity

Summary

Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).

References

URL	Tags
cve@mitre.org	ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U
cve@mitre.org	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732
cve@mitre.org	http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html
cve@mitre.org	http://mail.python.org/pipermail/mailman-users/2005-September/046523.html
cve@mitre.org	http://secunia.com/advisories/17511	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/17874
cve@mitre.org	http://secunia.com/advisories/18456
cve@mitre.org	http://secunia.com/advisories/18503
cve@mitre.org	http://secunia.com/advisories/18612
cve@mitre.org	http://secunia.com/advisories/19167
cve@mitre.org	http://secunia.com/advisories/19196
cve@mitre.org	http://secunia.com/advisories/19532
cve@mitre.org	http://securitytracker.com/id?1015735
cve@mitre.org	http://www.debian.org/security/2006/dsa-955
cve@mitre.org	http://www.osvdb.org/20819
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2006-0204.html
cve@mitre.org	http://www.securityfocus.com/bid/15408
cve@mitre.org	http://www.trustix.org/errata/2006/0012/
cve@mitre.org	http://www.ubuntu.com/usn/usn-242-1
cve@mitre.org	http://www.vupen.com/english/advisories/2005/2404
cve@mitre.org	http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/23139
cve@mitre.org	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038
af854a3a-2127-422b-91ae-364da2661108	ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U
af854a3a-2127-422b-91ae-364da2661108	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732
af854a3a-2127-422b-91ae-364da2661108	http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html
af854a3a-2127-422b-91ae-364da2661108	http://mail.python.org/pipermail/mailman-users/2005-September/046523.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17511	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17874
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18456
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18503
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18612
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19167
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19196
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19532
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1015735
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2006/dsa-955
af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/20819
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2006-0204.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/15408
af854a3a-2127-422b-91ae-364da2661108	http://www.trustix.org/errata/2006/0012/
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/usn-242-1
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2005/2404
af854a3a-2127-422b-91ae-364da2661108	http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/23139
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038

Impacted products

Vendor	Product	Version
gnu	mailman	2.0
gnu	mailman	2.0
gnu	mailman	2.0
gnu	mailman	2.0.1
gnu	mailman	2.0.2
gnu	mailman	2.0.3
gnu	mailman	2.0.4
gnu	mailman	2.0.5
gnu	mailman	2.0.6
gnu	mailman	2.0.7
gnu	mailman	2.0.8
gnu	mailman	2.0.9
gnu	mailman	2.0.10
gnu	mailman	2.0.11
gnu	mailman	2.0.12
gnu	mailman	2.0.13
gnu	mailman	2.0.14
gnu	mailman	2.1
gnu	mailman	2.1.1
gnu	mailman	2.1.2
gnu	mailman	2.1.3
gnu	mailman	2.1.4
gnu	mailman	2.1.5
gnu	mailman	2.1.5.8

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0:beta3:*:*:*:*:*:*",
              "matchCriteriaId": "EC6B30F6-70A8-43C7-BA5C-6DD8A6ED829D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0:beta4:*:*:*:*:*:*",
              "matchCriteriaId": "767101D3-ABB0-4D34-AA28-75F78A392F39",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0:beta5:*:*:*:*:*:*",
              "matchCriteriaId": "BEB60D06-E9D0-4949-8542-334D180F491D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F884774-D1A1-42A6-A3FE-9B0500725666",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "2C56B981-FD66-46F2-806A-3FFDEC520482",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E3E1994-6CAC-48E9-8438-0D894A76FE66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB8742B0-A91D-457D-BF57-06AFC5219BF9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F04EDBE-4B04-4B4C-A2BE-5286AC7C8952",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "615566E3-9EBD-49B3-9727-0883D3F0334B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "F59D0CCF-3CD0-4D99-B1F1-38F331422801",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "FADF5CE8-D072-4CFE-8A96-BA86187B478B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "72278005-5F2A-4459-8813-DF7EC2D1F063",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E39A909-E266-4BA9-87C6-DE26052433E9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABA16FD9-0625-4D3D-9F10-130A28C88DA2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE33EFBF-E155-4C3B-93CC-63AA1266A8A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "78F2FB70-7EB9-4AA7-9E85-C151C3CC8104",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.0.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "47F9AC7B-C0EB-4B7F-8997-1491301D0EF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1D6A976-FFEA-4DB6-B002-8036E778C78E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.1:beta1:*:*:*:*:*:*",
              "matchCriteriaId": "9D3AFFFD-1BDC-4511-9DA0-56ACD337F56C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B1500D8-952A-46C6-920C-096760C36A43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "503D7346-4891-40B1-A0CD-0FACC5359431",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "643610C6-99A9-43C9-A8FC-463A244C08DE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "45C53260-503F-4934-B1FE-9FACD8E0EE66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.5.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "C670F583-6B60-4D80-A75F-CD53FDDF27D9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash)."
    }
  ],
  "id": "CVE-2005-3573",
  "lastModified": "2026-06-16T22:17:13.047",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-11-16T07:42:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://mail.python.org/pipermail/mailman-users/2005-September/046523.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17511"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/17874"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/18456"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/18503"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/18612"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19167"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19196"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19532"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1015735"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2006/dsa-955"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/20819"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0204.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/15408"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.trustix.org/errata/2006/0012/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/usn-242-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2005/2404"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://mail.python.org/pipermail/mailman-users/2005-September/046523.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/17511"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17874"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/18456"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/18503"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/18612"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19167"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19196"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19532"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015735"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2006/dsa-955"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/20819"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0204.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/15408"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.trustix.org/errata/2006/0012/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/usn-242-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2005/2404"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-P59G-55FW-7Q46

Vulnerability from github – Published: 2022-05-03 03:14 – Updated: 2022-05-03 03:14

Details

Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2005-3573"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2005-11-16T07:42:00Z",
    "severity": "MODERATE"
  },
  "details": "Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).",
  "id": "GHSA-p59g-55fw-7q46",
  "modified": "2022-05-03T03:14:30Z",
  "published": "2022-05-03T03:14:30Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-3573"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038"
    },
    {
      "type": "WEB",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732"
    },
    {
      "type": "WEB",
      "url": "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html"
    },
    {
      "type": "WEB",
      "url": "http://mail.python.org/pipermail/mailman-users/2005-September/046523.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17511"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17874"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18456"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18503"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18612"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19167"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19196"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19532"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1015735"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2006/dsa-955"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/20819"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0204.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/15408"
    },
    {
      "type": "WEB",
      "url": "http://www.trustix.org/errata/2006/0012"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-242-1"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2005/2404"
    },
    {
      "type": "WEB",
      "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2005-3573

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).

Aliases

CVE-2005-3573

Aliases

CVE-2005-3573

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2005-3573",
    "description": "Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).",
    "id": "GSD-2005-3573",
    "references": [
      "https://www.suse.com/security/cve/CVE-2005-3573.html",
      "https://www.debian.org/security/2006/dsa-955",
      "https://access.redhat.com/errata/RHSA-2006:0204"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2005-3573"
      ],
      "details": "Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).",
      "id": "GSD-2005-3573",
      "modified": "2023-12-13T01:20:12.757054Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2005-3573",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash)."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "19167",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19167"
          },
          {
            "name": "USN-242-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/usn-242-1"
          },
          {
            "name": "18503",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/18503"
          },
          {
            "name": "ADV-2005-2404",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2005/2404"
          },
          {
            "name": "20060401-01-U",
            "refsource": "SGI",
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U"
          },
          {
            "name": "2006-0012",
            "refsource": "TRUSTIX",
            "url": "http://www.trustix.org/errata/2006/0012/"
          },
          {
            "name": "RHSA-2006:0204",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0204.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10038",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038"
          },
          {
            "name": "20819",
            "refsource": "OSVDB",
            "url": "http://www.osvdb.org/20819"
          },
          {
            "name": "mailman-utf8-scrubber-dos(23139)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139"
          },
          {
            "name": "18456",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/18456"
          },
          {
            "name": "1015735",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1015735"
          },
          {
            "name": "SUSE-SR:2006:001",
            "refsource": "SUSE",
            "url": "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html"
          },
          {
            "name": "17874",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/17874"
          },
          {
            "name": "19532",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19532"
          },
          {
            "name": "MDKSA-2005:222",
            "refsource": "MANDRIVA",
            "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222"
          },
          {
            "name": "15408",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/15408"
          },
          {
            "name": "18612",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/18612"
          },
          {
            "name": "17511",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/17511"
          },
          {
            "name": "[Mailman-Users] 20050912 Uncaught runner exception: \u0027utf8\u0027 codeccan\u0027tdecode bytes in position 1-4: invalid data",
            "refsource": "MLIST",
            "url": "http://mail.python.org/pipermail/mailman-users/2005-September/046523.html"
          },
          {
            "name": "19196",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19196"
          },
          {
            "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732",
            "refsource": "CONFIRM",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732"
          },
          {
            "name": "DSA-955",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2006/dsa-955"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.1.1:beta1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.14:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0:beta3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0:beta4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.1.5.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.12:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.13:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.0:beta5:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3573"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[Mailman-Users] 20050912 Uncaught runner exception: \u0027utf8\u0027 codeccan\u0027tdecode bytes in position 1-4: invalid data",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://mail.python.org/pipermail/mailman-users/2005-September/046523.html"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732"
            },
            {
              "name": "15408",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/15408"
            },
            {
              "name": "17511",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/17511"
            },
            {
              "name": "MDKSA-2005:222",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:222"
            },
            {
              "name": "17874",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17874"
            },
            {
              "name": "18612",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/18612"
            },
            {
              "name": "DSA-955",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2006/dsa-955"
            },
            {
              "name": "USN-242-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/usn-242-1"
            },
            {
              "name": "20819",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://www.osvdb.org/20819"
            },
            {
              "name": "RHSA-2006:0204",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0204.html"
            },
            {
              "name": "2006-0012",
              "refsource": "TRUSTIX",
              "tags": [],
              "url": "http://www.trustix.org/errata/2006/0012/"
            },
            {
              "name": "1015735",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1015735"
            },
            {
              "name": "19167",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19167"
            },
            {
              "name": "19196",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19196"
            },
            {
              "name": "18456",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/18456"
            },
            {
              "name": "20060401-01-U",
              "refsource": "SGI",
              "tags": [],
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U"
            },
            {
              "name": "19532",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19532"
            },
            {
              "name": "SUSE-SR:2006:001",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html"
            },
            {
              "name": "18503",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/18503"
            },
            {
              "name": "ADV-2005-2404",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2005/2404"
            },
            {
              "name": "mailman-utf8-scrubber-dos(23139)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23139"
            },
            {
              "name": "oval:org.mitre.oval:def:10038",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10038"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-10-11T01:30Z",
      "publishedDate": "2005-11-16T07:42Z"
    }
  }
}

RHSA-2006:0204

Vulnerability from csaf_redhat - Published: 2006-03-07 20:44 - Updated: 2026-06-25 10:33

Summary

Red Hat Security Advisory: mailman security update

Severity

Moderate

Scope

2 vulnerabilities in this advisory, including CVE-2005-3573.

CVE-2005-3573

Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).

Fixed: 64 products

https://access.redhat.com/errata/RHSA-2006:0204

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2005-3573 (GCVE-0-2005-3573)

CERTA-2006-AVI-106

Description

Solution

FKIE_CVE-2005-3573

GHSA-P59G-55FW-7Q46

GSD-2005-3573

RHSA-2006:0204

Tags

Sightings

Nomenclature

Related by attack behaviour