CVE-2006-0052: gnu mailman

CVSS: 5.0v2.0MediumModified

AliasesRHSA-2006:0486DSA-1027-1

Published 31-03-2006Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2006-0052 is a medium (CVSS 5.0) vulnerability in gnu mailman. EPSS estimates a 2.70% chance of exploitation in the next 30 days, higher than 85.7% of scored vulnerabilities.

Overall risk

21/100

0100

Low · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

2.70%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

31-03-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

2.70%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

0.00 pp

From 2.70% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.70%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat2 products

mailman< 3:2.1.5.1-25.rhel3.5 | < 3:2.1.5.1-34.rhel4.3
mailman-debuginfo< 3:2.1.5.1-25.rhel3.5 | < 3:2.1.5.1-34.rhel4.3

Debian1 product

mailman< 2.1.5-8sarge2

Gnu1 product

mailman1.0 | 1.1 | 2.0 | 2.0:beta3 | 2.0:beta4 | 2.0:beta5 | 2.0.1 | 2.0.2 | 2.0.3 | 2.0.4 | 2.0.5 | 2.0.6 | 2.0.7 | 2.0.8 | 2.0.9 | 2.0.10 | 2.0.11 | 2.0.12 | 2.0.13 | 2.0.14 | 2.1 | 2.1.1 | 2.1.2 | 2.1.3 | 2.1.4 | 2.1.5 | 2.1b1

3 vendors · 4 products