CVE-2005-4153 Denial of service in n/a

High 7.8 Published 11 Dec 2005 Updated 7 Aug 2024

Remote attackers can cause a denial of service in Mailman by sending messages with malformed date data, affecting mailing list availability.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2005-4153?

CVE-2005-4153 is a high-severity denial of service vulnerability in n/a, published on 11 Dec 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE-2005-3573.

Which versions are affected by CVE-2005-4153?

It affects 1 product.

Products include Gnu Mailman.

How do I fix CVE-2005-4153?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2005-4153 being exploited?

There is no known exploitation of CVE-2005-4153 in the wild and no public exploit code.

Sources

Also known as GHSA-9hr9-wg7q-ffxj.