mailman: path traversal [LWN.net]

Package(s):

mailman

CVE #(s):

CAN-2005-0202

Created:

February 9, 2005

Updated:

July 13, 2005

Description:

The "private" module in the mailman mailing list manager fails to sanitize path names adequately. An attacker could exploit this vulnerability to retrieve private information, including passwords and private list archives.

This vulnerability was used to compromise the Full-Disclosure list.

Alerts:

Fedora-Legacy	FLSA:152895	2005-07-10
Ubuntu	USN-78-2	2005-02-17
Debian	DSA-674-3	2005-02-21
Mandrake	MDKSA-2005:037	2005-02-14
Red Hat	RHSA-2005:137-01	2005-02-15
SuSE	SUSE-SA:2005:007	2005-02-14
Debian	DSA-674-2	2005-02-11
Red Hat	RHSA-2005:136-01	2005-02-10
Gentoo	200502-11	2005-02-10
Fedora	FEDORA-2005-132	2005-02-10
Fedora	FEDORA-2005-131	2005-02-10
Ubuntu	USN-78-1	2005-02-09

(Log in to post comments)