Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200406-04] Mailman: Member password disclosure vulnerability Vulnerability Scan
Vulnerability Scan Summary
Mailman: Member password disclosure vulnerability
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200406-04
(Mailman: Member password disclosure vulnerability)
Mailman contains an unspecified vulnerability in the handling of request
By sending a carefully crafted email request to the mailman server an
attacker could obtain member passwords.
There is no known workaround at this time.
All users of Mailman should upgrade to the latest stable version:
# emerge sync
# emerge -pv ">=net-mail/mailman-2.1.5"
# emerge ">=net-mail/mailman-2.1.5"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.