Sympa Elevation of Privilege Vulnerability

Sympa is an open source email management list software from the Sympa community. The software supports email management, authentication and access control. A security vulnerability exists in versions prior to Sympa 6.2.56. An attacker can exploit the vulnerability to elevate privileges...

FreeBSD : sympa -- Denial of service caused by malformed CSRF token (9908a1cc-35ad-424d-be0b-7e56abd5931a)

Javier Moreno discovered a vulnerability in Sympa web interface that can cause denial of service DoS attack. By submitting requests with malformed parameters, this flaw allows to create junk files in Sympa's directory for temporary files. And particularly by tampering token to prevent CSRF, it...

DEBIAN-CVE-2020-10936

Sympa before 6.2.56 allows privilege escalation...

CVE-2020-10936

Sympa before 6.2.56 allows privilege escalation...

CVE-2020-10936

Sympa before 6.2.56 allows privilege escalation...

UBUNTU-CVE-2020-10936

Sympa before 6.2.56 allows privilege escalation...

Privilege escalation

Sympa before 6.2.56 allows privilege escalation...

CVE-2020-10936

Sympa before 6.2.56 allows privilege escalation...

CVE-2020-10936

Sympa before 6.2.56 allows privilege escalation...

CVE-2020-10936

CVE-2020-10936 affects Sympa (mailing list manager). Multiple advisories (Debian DSA-4818, Ubuntu USN-4442-2, OSV) confirm a local privilege-escalation flaw in Sympa related to improper handling of environment variables when a setuid context is involved, enabling root-level access in affected ins...

CVE-2020-10936

Sympa before 6.2.56 allows privilege escalation...

sympa - Security flaws in setuid wrappers

A vulnerability has been discovered in Sympa web interface by which attacker can execute arbitrary code with root privileges. Sympa uses two sorts of setuid wrappers: FastCGI wrappers newaliases wrapper The FastCGI wrappers wwsympa-wrapper.fcgi and sympasoapserver-wrapper.fcgi were used to make t...

MGASA-2020-0146 Updated sympa packages fix security vulnerability

Updated sympa packages fix security vulnerability: Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service disk consumption from temporary files, and a flood of notifications to listmasters via a series of requests with malformed parameters CVE-2020-9369...

Updated sympa packages fix security vulnerability

Updated sympa packages fix security vulnerability: Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service disk consumption from temporary files, and a flood of notifications to listmasters via a series of requests with malformed parameters CVE-2020-9369...

PT-2020-5771 · Renaud Dubois Christophe Wolfhugel Olivier Salauen +2 · Sympa +2

Name of the Vulnerable Software and Affected Versions: Sympa versions prior to 6.2.56 Description: The issue is related to a lack of privilege management mechanism in the Sympa mailing list manager, which can be exploited to gain access to confidential data, compromise data integrity, and cause a...

Fedora: Security Advisory for sympa (FEDORA-2020-8f7dcb7d00)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: sympa-6.2.54-1.fc32

Sympa is scalable and highly customizable mailing list manager. It can cope with big lists 200,000 subscribers and comes with a complete user and admin Web interface. It is internationalized, and supports the us, fr, de, es, it, fi, and chinese locales. A scripting language allows you to extend t...

[SECURITY] Fedora 30 Update: sympa-6.2.54-1.fc30

Sympa is scalable and highly customizable mailing list manager. It can cope with big lists 200,000 subscribers and comes with a complete user and admin Web interface. It is internationalized, and supports the us, fr, de, es, it, fi, and chinese locales. A scripting language allows you to extend t...

Fedora: Security Advisory for sympa (FEDORA-2020-79516cb689)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 30 : sympa (2020-bb5aa250c9)

Update to sympa 6.2.54 : - Fixes CVE-2020-9369 - See https://sympa-community.github.io/security/2020-001.html for details Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean a...