Description
Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable.
References
- [Mailman-Announce] 20060913 RELEASED: Mailman 2.1.9 mailing-list
- 22639 third-party-advisory
- [security] 20060906 Re: mailman 2.1.5-8sarge3: screwup between security and maintainer upload mailing-list
- SUSE-SR:2006:025 vendor-advisory
- 21732 third-party-advisory