165 matches found
CVE-2023-50917
MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager...
CVE-2023-50917
CVE-2023-50917 affects MajorDoMo (Major Domestic Module) prior to commit 0662e5e, allowing unauthenticated command execution via thumb.php shell metacharacters. Exploitation leads to OS command execution and potential full system compromise; patching guidance in connected documents: update MajorD...
Exploit for Command Injection in Mjdm Majordomo
Deep Dive: CVE-2023-50917 - Unmasking an Unauthenticated Remo...
SUSE CVE-2011-0049
Directory traversal vulnerability in the listfileget function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. dot dot sequences in the help command, as demonstrated using 1 a crafted email and 2 cgi-bin/mjwwwusr in the web interface...
Majordomo 1.89/1.90 lists Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2310/info Majordomo is a perl-based Internet e-mail list server. Versions prior to 1.91 are vulnerable to an attack whereby specially crafted e-mail headers are incorrectly processed, yielding the ability to execute...
Majordomo 1.94.4/1.94.5 - Local -C Parameter Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/903/info It is possible for a local user to gain majordomo privileges through a vulnerability which allows privileged arbitrary commands to be executed. If the -C parameter is passed to majordomo or one of several other...
Great Circle Associates Majordomo 1.94.4 - Local resend Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/902/info It is possible to execute arbitrary commands with elevated privileges through exploiting the majordomo binary, resend. A setuid root wrapper program calls resend after setuiding and setgiding to lowered but still...
Majordomo 1.94.4/1.94.5 - Local -C Parameter Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/903/info It is possible for a local user to gain majordomo privileges through a vulnerability which allows privileged arbitrary commands to be executed. If the -C parameter is passed to majordomo or one of several other...
Majordomo 2 File Disclosure
File disclosure vulnerability in Majordomo 2 help command Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
CVE-2011-0063
The listfileget function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./.../ sequence in the "extra" parameter to the help command, which causes the regular expression to produce .. dot dot...
CVE-2011-0063
Majordomo 2 contains a directory-traversal flaw in the _list_file_get() helper (help command). Affected versions are Majordomo 2 prior to 20110131; input in the extra parameter can produce dot-dot sequences to read arbitrary files. This is linked to an earlier incomplete fix for CVE-2011-0049. Pu...
CVE-2011-0063
The listfileget function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./.../ sequence in the "extra" parameter to the help command, which causes the regular expression to produce .. dot dot...
CVE-2011-0063: Improper Limitation of a Pathname to a Restricted Directory
The listfileget function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./.../ sequence in the "extra" parameter to the help command, which causes the regular expression to produce .. dot dot...
Majordomo 2 _list_file_get() Function Traversal Arbitrary File Access
The version of Majordomo 2 on the remote host fails to sanitize input to the 'extra' parameter of the 'mjwwwusr' script before using it to return the contents of a file. An attacker can leverage this issue using a directory traversal sequence to view arbitrary files on the affected host within th...
Majordomo Detection
The remote host hosts Majordomo, a web-based mailing list management application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid51999; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-2011-0049
Directory traversal vulnerability in the listfileget function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. dot dot sequences in the help command, as demonstrated using 1 a crafted email and 2 cgi-bin/mjwwwusr in the web interface...
Directory traversal
Directory traversal vulnerability in the listfileget function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. dot dot sequences in the help command, as demonstrated using 1 a crafted email and 2 cgi-bin/mjwwwusr in the web interface...
DSquare Exploit Pack: D2SEC_MAJORDOMO
Name| d2secmajordomo ---|--- CVE| CVE-2011-0049 Exploit Pack| D2ExploitPack Description| d2secmajordomo Notes|...
CVE-2011-0049
Directory traversal vulnerability in the listfileget function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. dot dot sequences in the help command, as demonstrated using 1 a crafted email and 2 cgi-bin/mjwwwusr in the web interface...
CVE-2011-0049
Majordomo 2 contains a directory traversal vulnerability in the _list_file_get() function (lib/Majordomo.pm) that can be triggered via the help command over email or the web interface, allowing remote, unauthenticated attackers to read arbitrary files (e.g., /etc/passwd). Affected versions are Ma...