CVE-2005-3573

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-16 · updated 2026-06-16

Description

Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).

Affected products

GNU Mailman: 2.0-beta3, 2.0-beta4, 2.0-beta5, 2.0.1, 2.0.2, 2.0.3 (+18)

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327732
http://lists.suse.com/archive/suse-security-announce/2006-Jan/0003.html
http://mail.python.org/pipermail/mailman-users/2005-September/046523.html
http://secunia.com/advisories/17511
http://secunia.com/advisories/17874
http://secunia.com/advisories/18456
http://secunia.com/advisories/18503
http://secunia.com/advisories/18612
http://secunia.com/advisories/19167
http://secunia.com/advisories/19196
http://secunia.com/advisories/19532

Get alerted when CVE-2005-3573 or the next vulnerability affects your stack