CVE-2006-2191
** DISPUTED ** Format string vulnerability in Mailman before 2.1.9 allows attackers to execute...
Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable.
- Record
CVE-2006-2191- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable.
- Record
CVE-2006-2191- Updated
- 2026-11-02
EUVDEUVD-2006-2192No score
Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable.
- Record
EUVD-2006-2192- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2gpc-wgcp-jq34No score
** DISPUTED ** Format string vulnerability in Mailman before 2.1.9 allows attackers to execute...
** DISPUTED ** Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable."
- Record
GHSA-2gpc-wgcp-jq34- Updated
- 2026-11-02
OSVNo score
Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable.
- Record
CVE-2006-2191- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2191 is a high vulnerability (CVSS 7.5) in Gnu Mailman, published September 19, 2006. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 2.65%, the 85th percentile.
References
mail.python.org/pipermail/mailman-announce/2006-September/000087.html
secunia.com/advisories/22639
people.debian.org/~terpstra/message/20060906.155339.0c0732a4.en.html
novell.com/linux/security/advisories/2006_25_sr.html
nvd.nist.gov/vuln/detail/CVE-2006-2191
github.com/advisories/GHSA-2gpc-wgcp-jq34