Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-0063
HistoryMar 15, 2011 - 5:55 p.m.

CVE-2011-0063

2011-03-1517:55:00
CWE-22
[email protected]
web.nvd.nist.gov
29
majordomo
directory traversal
cve-2011-0063
nvd
security vulnerability

9.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.04 Low

EPSS

Percentile

91.9%

JSON

The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./…/ sequence in the “extra” parameter to the help command, which causes the regular expression to produce … (dot dot) sequences. NOTE: this vulnerability is due to an incomplete fix for CVE-2011-0049.

Related

prion 2
openvas 1
dsquare 1
nessus 1
nuclei 1
d2 2
securityvulns 3
packetstorm 2
seebug 1
cve 1
exploitpack 1
cert 1
exploitdb 1
nmap 1
thn 1
prion
prion
Directory traversal
2011-03-15 17:55:00
Directory traversal
2011-02-04 01:00:00
openvas
openvas
Majordomo2 Directory Traversal Vulnerability
2011-02-07 00:00:00
dsquare
dsquare
Majordomo 2 File Disclosure
2012-04-27 00:00:00
nessus
nessus
Majordomo 2 _list_file_get() Function Traversal Arbitrary File Access
2011-02-16 00:00:00
nuclei
nuclei
Majordomo2 - SMTP/HTTP Directory Traversal
2021-04-18 10:16:06
d2
d2
DSquare Exploit Pack: D2SEC_MAJORDOMO2
2011-03-15 17:55:00
DSquare Exploit Pack: D2SEC_MAJORDOMO
2011-02-04 01:00:00
securityvulns
securityvulns
NSOADV-2011-003: Majordomo2 'help' Command Directory Traversal (Patch Bypass)
2011-03-10 00:00:00
Majordomo2 - Directory Traversal (SMTP/HTTP)
2011-02-03 00:00:00
Majordomo2 directory traversal
2011-03-10 00:00:00
packetstorm
packetstorm
Majordomo2 Directory Traversal
2011-03-08 00:00:00
Majordomo2 20110121 Directory Traversal
2011-02-02 00:00:00
seebug
seebug
Majordomo2 - Directory Traversal (SMTP/HTTP)
2014-07-01 00:00:00
cve
cve
CVE-2011-0049
2011-02-04 01:00:00
exploitpack
exploitpack
Majordomo2 - SMTPHTTP Directory Traversal
2011-02-03 00:00:00
cert
cert
Majordomo 2 _list_file_get() directory traversal vulnerability
2011-02-04 00:00:00
exploitdb
exploitdb
Majordomo2 - 'SMTP/HTTP' Directory Traversal
2011-02-03 00:00:00
nmap
nmap
http-majordomo2-dir-traversal NSE Script
2011-06-27 20:22:25
thn
thn
Nmap 5.59 BETA1 - 40 new NSE scripts & improved IPv6
2011-07-01 11:41:00

9.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.04 Low

EPSS

Percentile

91.9%

JSON
Related for CVE-2011-0063
prion2openvas1dsquare1nessus1nuclei1d22securityvulns3packetstorm2seebug1cve1exploitpack1cert1exploitdb1nmap1thn1