CVE-2006-2191

描述

Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable.

如何修補 CVE-2006-2191

要修補 CVE-2006-2191,請將受影響套件升級到下列已修補版本。

• Debian/mailman—升級至 1:2.1.9-1 或更新版本

CVE-2006-2191 正在被利用嗎?

低 — EPSS 為 2.5%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 1:2.1.9-1

參考連結(5)

• ADVISORYsecunia.com/advisories/21732
• ADVISORYsecunia.com/advisories/22639
• ADVISORYwww.novell.com/linux/security/advisories/2006_25_sr.html
• PATCHmail.python.org/pipermail/mailman-announce/2006-September/000087.html