Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-78-1
HistoryFeb 10, 2005 - 12:00 a.m.

Mailman vulnerability

2005-02-1000:00:00
ubuntu.com
55

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.008

Percentile

82.3%

JSON

Releases

  • Ubuntu 4.10

Details

An path traversal vulnerability has been discovered in the “private”
module of Mailman. A flawed path sanitation algorithm allowed the
construction of URLS to arbitrary files readable by Mailman. This
allowed a remote attacker to retrieve configuration and password
databases, private list archives, and other files.

OSVersionArchitecturePackageVersionFilename
Ubuntu4.10noarchmailman< *UNKNOWN

Related

ubuntucve 1
nessus 14
debiancve 1
cvelist 1
openvas 16
securityvulns 1
freebsd 1
redhat 2
veracode 1
gentoo 1
cve 1
ubuntu 1
nvd 1
debian 6
hackerone 2
osv 1
ubuntucve
ubuntucve
CVE-2005-0202
2005-05-02 00:00:00
nessus
nessus
FreeBSD : mailman -- directory traversal vulnerability (c7ccc33f-7d31-11d9-a9e7-0001020eed82)
2005-07-13 00:00:00
GLSA-200502-11 : Mailman: Directory traversal vulnerability
2005-02-14 00:00:00
Ubuntu 4.10 : mailman vulnerabilities (USN-78-1)
2006-01-15 00:00:00
debiancve
debiancve
CVE-2005-0202
2005-05-02 04:00:00
cvelist
cvelist
CVE-2005-0202
2005-02-09 05:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200502-11 (mailman)
2008-09-24 00:00:00
SLES9: Security update for mailman
2009-10-10 00:00:00
Mailman private.py Directory Traversal Vulnerability
2005-11-03 00:00:00
securityvulns
securityvulns
[Full-Disclosure] Administrivia: List Compromised due to Mailman Vulnerability
2005-02-10 00:00:00
freebsd
freebsd
mailman -- directory traversal vulnerability
2005-01-02 00:00:00
redhat
redhat
(RHSA-2005:136) mailman security update
2005-02-10 00:00:00
(RHSA-2005:137) mailman security update
2005-02-15 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:08:56
gentoo
gentoo
Mailman: Directory traversal vulnerability
2005-02-10 00:00:00
cve
cve
CVE-2005-0202
2005-05-02 04:00:00
ubuntu
ubuntu
Fixed mailman packages for USN-78-1
2005-02-17 00:00:00
nvd
nvd
CVE-2005-0202
2005-05-02 04:00:00
debian
debian
[SECURITY] [DSA 674-1] New mailman packages fix several vulnerabilities
2005-02-10 11:51:35
[SECURITY] [DSA 674-3] New mailman packages really fix several vulnerabilities
2005-02-21 10:29:17
[SECURITY] [DSA 674-2] New mailman packages really fix several vulnerabilities
2005-02-11 07:49:12
hackerone
hackerone
Uber: Configuration and/or source code files on uchat-staging.uberinternal.com can be viewed without OneLogin SSO Authentication
2017-12-17 22:29:41
Uber: It's possible to view configuration and/or source code on uchat.awscorp.uberinternal.com without
2017-12-17 00:36:48
osv
osv
mailman - cross-site scripting, directory traversal
2005-02-21 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.008

Percentile

82.3%

JSON
Related for USN-78-1
ubuntucve1nessus14debiancve1cvelist1openvas16securityvulns1freebsd1redhat2veracode1gentoo1cve1ubuntu1nvd1debian6hackerone2osv1