Novell openSUSE, GNU Mailman

ソフト名：Novell openSUSE 11.3 (GNU Mailman 2.1.14)

回避策：openSUSE-SU-2011:0312-1にて対応

脆弱性：XSS, スクリプトの挿入, 不正HTMLの挿入, スクリプトコード実行

ソース：http://www.opensuse.org/en/

https://hermes.opensuse.org/messages/7856168

http://secunia.com/advisories/41265/

http://secunia.com/advisories/43389/

http://secunia.com/advisories/44068/

http://dvw-j.blogspot.com/2011/02/mailman-debian-gnulinux.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3089

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0707

CVE：CVE-2010-3089, CVE-2011-0707

危険性：Medium Risk

Red Hat Fedora

ソフト名：Red Hat Fedora 13/14 (GNU Mailman 2.1.14)

回避策：FEDORA-2011-2102, FEDORA-2011-2125にて対応

脆弱性：XSS, スクリプトの挿入, 不正HTMLの挿入

ソース：https://fedoraproject.org/wiki/F13_one_page_release_notes

http://fedoraproject.org/

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056387.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056363.html

http://secunia.com/advisories/43389/

http://secunia.com/advisories/43829/

http://dvw-j.blogspot.com/2011/02/mailman-debian-gnulinux.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0707

CVE：CVE-2011-0707

危険性：Medium Risk

GNU Mailman

ソフト名：GNU Mailman 2.1.13
回避策：アップデートにて対応
脆弱性：XSS, 認証資格情報の奪取
ソース：http://www.gnu.org/software/mailman/
https://bugzilla.redhat.com/show_bug.cgi?id=631881
http://www.securityfocus.com/bid/43187
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3089
http://secunia.com/advisories/41265
CVE：CVE-2010-3089
危険性：Medium Risk