Unrated severityNVD Advisory· Published Feb 17, 2004· Updated Jun 16, 2026

CVE-2003-0965

Description

Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/Mailman
cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*
Range: <=2.1.4
Mailman/Mailmanllm-fuzzy
Range: <2.1.4

Patches

Vulnerability mechanics

References

mail.python.org/pipermail/mailman-announce/2003-December/000066.htmlnvdPatchVendor Advisory
www.redhat.com/support/errata/RHSA-2004-020.htmlnvdPatchVendor Advisory
www.securityfocus.com/bid/9336nvdVendor Advisory
distro.conectiva.com.br/atualizacoes/nvd
secunia.com/advisories/10519nvd
www.debian.org/security/2004/dsa-436nvd
www.mandriva.com/security/advisoriesnvd
www.osvdb.org/3305nvd
exchange.xforce.ibmcloud.com/vulnerabilities/14121nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A813nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000