Skip to content
OpenAdvisories
Unscored DSA-674-1 2 CVEs

mailman - cross-site scripting, directory traversal

Published Feb 10, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 mailman 2.0.11-1woody11

Vulnerabilities 2

  • Medium —
    CVE-2004-1177

    mailman Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.

    mailman PyPI
  • Unscored —
    CVE-2005-0202

    Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote a…