Lucene search

K
cve[email protected]CVE-2015-2775
HistoryApr 13, 2015 - 2:59 p.m.

CVE-2015-2775

2015-04-1314:59:00
CWE-22
web.nvd.nist.gov
56
cve-2015-2775
directory traversal
gnu mailman
nvd
security vulnerability
remote attackers
arbitrary files

6.7 Medium

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.031 Low

EPSS

Percentile

90.9%

Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a … (dot dot) in a list name.

6.7 Medium

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.031 Low

EPSS

Percentile

90.9%