Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2005-0202HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0202
2005-05-0204:00:00
Debian Security Bug Tracker
security-tracker.debian.org
14
0.008 Low
EPSS
Percentile
82.1%
Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via “…/…///” sequences, which are not properly cleansed by regular expressions that are intended to remove “…/” and “./” sequences.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 10 | all | mailman | < 2.1.5-6 | mailman_2.1.5-6_all.deb |
Related
redhat
redhat
(RHSA-2005:137) mailman security update
2005-02-15 00:00:00
(RHSA-2005:136) mailman security update
2005-02-10 00:00:00
openvas
openvas
SLES9: Security update for mailman
2009-10-10 00:00:00
Ubuntu: Security Advisory (USN-78-1)
2022-08-26 00:00:00
Gentoo Security Advisory GLSA 200502-11 (mailman)
2008-09-24 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : mailman (MDKSA-2005:037)
2005-02-15 00:00:00
GLSA-200502-11 : Mailman: Directory traversal vulnerability
2005-02-14 00:00:00
Ubuntu 4.10 : mailman vulnerabilities (USN-78-1)
2006-01-15 00:00:00
ubuntu
ubuntu
Fixed mailman packages for USN-78-1
2005-02-17 00:00:00
Mailman vulnerability
2005-02-10 00:00:00
ubuntucve
ubuntucve
CVE-2005-0202
2005-05-02 00:00:00
cvelist
cvelist
CVE-2005-0202
2005-02-09 05:00:00
securityvulns
securityvulns
freebsd
freebsd
mailman -- directory traversal vulnerability
2005-01-02 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:08:56
cve
cve
CVE-2005-0202
2005-05-02 04:00:00
gentoo
gentoo
Mailman: Directory traversal vulnerability
2005-02-10 00:00:00
debian
debian
[SECURITY] [DSA 674-1] New mailman packages fix several vulnerabilities
2005-02-10 00:00:00
hackerone
hackerone
osv
osv
mailman - cross-site scripting, directory traversal
2005-02-21 00:00:00