The remote host is missing an update to mailman announced via advisory DSA 1188-1. Several security related problems have been discovered in mailman, the web-based GNU mailing list manager. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-3636 Moritz Naumann discovered several cross-site scripting problems that could allow remote attackers to inject arbitrary web script or HTML. CVE-2006-4624 Moritz Naumann discovered that a remote attacker can inject arbitrary strings into the logfile.

For the stable distribution (sarge) this problem has been fixed in version 2.1.5-8sarge5. For the unstable distribution (sid) this problem has been fixed in version 2.1.8-3. We recommend that you upgrade your mailman package. https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201188-1