FKIE_CVE-2016-6893

Vulnerability from fkie_nvd - Published: 2016-09-02 14:59 - Updated: 2025-04-12 10:46
Severity ?
8.8 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Summary
Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim's account.
References
cve@mitre.orghttp://www.debian.org/security/2016/dsa-3668
cve@mitre.orghttp://www.securityfocus.com/bid/92731
cve@mitre.orghttp://www.securitytracker.com/id/1036728
cve@mitre.orghttps://bugs.launchpad.net/bugs/1614841Issue Tracking
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2016/dsa-3668
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/92731
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1036728
af854a3a-2127-422b-91ae-364da2661108https://bugs.launchpad.net/bugs/1614841Issue Tracking
Impacted products
Vendor Product Version
gnu mailman 2.1
gnu mailman 2.1.1
gnu mailman 2.1.2
gnu mailman 2.1.3
gnu mailman 2.1.4
gnu mailman 2.1.5
gnu mailman 2.1.6
gnu mailman 2.1.8
gnu mailman 2.1.9
gnu mailman 2.1.10
gnu mailman 2.1.10
gnu mailman 2.1.10b1
gnu mailman 2.1.10b3
gnu mailman 2.1.10b4
gnu mailman 2.1.11
gnu mailman 2.1.11
gnu mailman 2.1.11
gnu mailman 2.1.12
gnu mailman 2.1.12
gnu mailman 2.1.12
gnu mailman 2.1.13
gnu mailman 2.1.13
gnu mailman 2.1.14
gnu mailman 2.1.14
gnu mailman 2.1.14-1
gnu mailman 2.1.15
gnu mailman 2.1.15
gnu mailman 2.1.16
gnu mailman 2.1.16
gnu mailman 2.1.16
gnu mailman 2.1.16
gnu mailman 2.1.17
gnu mailman 2.1.18
gnu mailman 2.1.18
gnu mailman 2.1.18
gnu mailman 2.1.18
gnu mailman 2.1.18-1
gnu mailman 2.1.19
gnu mailman 2.1.19
gnu mailman 2.1.19
gnu mailman 2.1.19
gnu mailman 2.1.20
gnu mailman 2.1.21
gnu mailman 2.1.21
gnu mailman 2.1.22
gnu mailman 2.1.23
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1D6A976-FFEA-4DB6-B002-8036E778C78E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8894855-E303-4B55-B3BC-DCBE3A0AB703",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B1500D8-952A-46C6-920C-096760C36A43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "503D7346-4891-40B1-A0CD-0FACC5359431",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "643610C6-99A9-43C9-A8FC-463A244C08DE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "45C53260-503F-4934-B1FE-9FACD8E0EE66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "A34CBFC5-CB18-4FE4-9B4D-F3280CBCCD6C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2571330-3239-469E-883D-8994257D0C55",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F27323B-6B10-4941-B20B-187562797D44",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "890FEDE2-474A-4870-9165-CAD39BC6D318",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.10:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "D4FFE8F2-B665-41F1-B4C5-E7C66BE91E24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.10b1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C08F313-30E9-4B9E-BA5A-4910DD5E155C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.10b3:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9B09DFC-A238-49CA-9DB8-F4052775BF3D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.10b4:*:*:*:*:*:*:*",
              "matchCriteriaId": "C219D531-3E3A-4B85-B3A6-8A4335E86AB7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "A1C7EEDB-5794-419A-8E61-137DB76A4E15",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.11:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "C1FC55D7-3857-4614-82FC-5266A3BD8FE8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.11:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "A64FECFD-F6BF-49C1-926C-41868787378C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F7A3B58-4038-41AE-A42E-BE743A14D5A2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.12:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "2C3215CB-7146-49D3-B350-A07E0C9FB04D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.12:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "800F3CE3-CEE2-4C63-B0DD-F9F72E9F1B71",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "2019E834-DFF4-4C9A-82D1-E768EA8934EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.13:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "E3D1CC02-7D5F-41CB-A881-A82A13CE9EE5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "11010D5F-AA02-45EC-B007-47BF9194250B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.14:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "A677EC3D-A08A-44B8-B7E1-F229F515F407",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.14-1:*:*:*:*:*:*:*",
              "matchCriteriaId": "876E65AB-6D2E-41C2-899E-7D5EE176F877",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "7985A5B3-0473-426D-9F8D-63B81C7D1177",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.15:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "6B211D97-5316-4EB1-999D-26C53708F200",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6AC4D1E-B92F-400A-8B73-CB99E5825A05",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.16:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "5BB702F4-324D-4B87-9590-22CD2465A708",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.16:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "47B47F16-4E68-4DB2-9C61-DBABB75C7A99",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.16:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "11931F41-6B65-4C1B-9A82-8F89F093E9AA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "59A972C3-06C4-4DED-825C-B1931B35E135",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "6BB3C5C8-98AC-4BC3-A06E-6F2920CA951B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.18:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "1C3BC472-4428-4786-A3AA-390C66553DC0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.18:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "69B95EB8-6D8B-4342-A6A8-472BF1190A87",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.18:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "011CD4BF-FE51-40A7-B457-884DDF3C7FFC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.18-1:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C2DA8DD-77C1-44A0-9A49-FB1CEE26CB1E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "68C51AFA-3C45-48A2-8ADC-514BF5374413",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.19:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "BF11D5FD-FCD5-4147-876C-09980D05152C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.19:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "503671C5-1F2A-4676-8D58-86C2D01405E5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.19:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "5154BCB6-2216-433E-BC77-B862490545F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "E73970DC-7F70-437E-A669-B0EE6F4629AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "13081A16-D625-4AD1-9493-AFA5126269C6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.21:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "F6F40EE5-9E50-4703-9151-4640B11C78A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "51028759-33CD-4C80-A534-B46E62C03F4D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gnu:mailman:2.1.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "683F421B-C986-4572-9612-1635AF7DD084",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remote attackers to hijack the authentication of arbitrary users for requests that modify an option, as demonstrated by gaining access to the credentials of a victim\u0027s account."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de CSRF en la p\u00e1gina de opciones de usuario en GNU Mailman 2.1.x en versiones anteriores a 2.1.23 permite a atacantes remotos secuestrar la autenticaci\u00f3n de usuarios arbitrarios para peticiones que modifican una opci\u00f3n, tal como se demuestra ganando acceso a las credenciales de una cuenta de una v\u00edctima."
    }
  ],
  "id": "CVE-2016-6893",
  "lastModified": "2025-04-12T10:46:40.837",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2016-09-02T14:59:09.283",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2016/dsa-3668"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/92731"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id/1036728"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bugs.launchpad.net/bugs/1614841"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2016/dsa-3668"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/92731"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1036728"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking"
      ],
      "url": "https://bugs.launchpad.net/bugs/1614841"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.