Bug 677375 – CVE-2011-0707 Mailman: Three XSS flaws due improper escaping of the full name of the member

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 677375 - (CVE-2011-0707) CVE-2011-0707 Mailman: Three XSS flaws due improper escaping of the full name of the member

Summary:	CVE-2011-0707 Mailman: Three XSS flaws due improper escaping of the full name...

Status:	CLOSED ERRATA

Aliases:	CVE-2011-0707

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	public=20110218,reported=20110213,sou...
Keywords:	Security

Depends On:	677843 677844 677845 677846 677848 677849 679644 833939
Blocks:
	Show dependency tree / graph

Reported:	2011-02-14 09:43 EST by Jan Lieskovsky
Modified:	2016-03-04 07:40 EST (History)
CC List:	3 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2012-06-20 11:23:44 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2011:0307	normal	SHIPPED_LIVE	Moderate: mailman security update	2011-03-01 17:42:51 EST
Red Hat Product Errata	RHSA-2011:0308	normal	SHIPPED_LIVE	Moderate: mailman security update	2011-03-01 17:53:15 EST

Groups: None (edit)

Description Jan Lieskovsky 2011-02-14 09:43:58 EST

Mailman, the mailing list manager, did not properly sanitize
full name of the mailing list member, in the following confirmation
dialogs:
1), "Confirm unsubscription request" screen,
2), "Confirm change of email address request" screen,
3), "Re-enable mailing list membership" screen.

A remote, authenticated user could use these flaws to conduct
cross-site scripting (XSS) attacks (execute arbitrary HTML or
scripting code) via a specially-crafted full name of the mailing
list member.

References:
[1] http://mail.python.org/pipermail/mailman-announce/2011-February/000157.html

Acknowledgements:

Red Hat would like to thank Mark Sapiro for reporting these flaws.

Comment 3 Jan Lieskovsky 2011-02-14 09:51:39 EST

These issues affect the versions of the mailman package, as shipped
with Red Hat Enterprise Linux 4, 5, and 6.

--

These issues affect the versions of the mailman package, as shipped
with Fedora release of 13 and 14.

Comment 7 Huzaifa S. Sidhpurwala 2011-02-18 11:09:41 EST

Public via:

http://mail.python.org/pipermail/mailman-announce/2011-February/000158.html

Comment 8 Huzaifa S. Sidhpurwala 2011-02-22 23:12:04 EST

Created mailman tracking bugs for this issue

Affects: fedora-all [bug 679644]

Comment 9 errata-xmlrpc 2011-03-01 17:42:59 EST

This issue has been addressed in following products:

  Red Hat Enterprise Linux 4
  Red Hat Enterprise Linux 5

Via RHSA-2011:0307 https://rhn.redhat.com/errata/RHSA-2011-0307.html

Comment 10 errata-xmlrpc 2011-03-01 17:53:21 EST

This issue has been addressed in following products:

  Red Hat Enterprise Linux 6

Via RHSA-2011:0308 https://rhn.redhat.com/errata/RHSA-2011-0308.html

Note You need to log in before you can comment on or make changes to this bug.