1497 matches found
Directory traversal
Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. dot dot in a list name...
CVE-2015-2775
CVE-2015-2775 is a directory traversal vulnerability in GNU Mailman up to version 2.1.19, exploitable via a leading .. in a list name when not using a static alias. The underlying issue is improper validation of list-name input, enabling remote attackers to execute arbitrary files. Impact is remo...
CVE-2015-2775
Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. dot dot in a list name...
CVE-2015-2775
Removed by vendor...
FreeBSD : mailman -- path traversal vulnerability (a5f160fa-deee-11e4-99f8-080027ef73ec)
Mark Sapiro reports : A path traversal vulnerability has been discovered and fixed. This vulnerability is only exploitable by a local user on a Mailman server where the suggested Exim transport, the Postfix postfixtomailman.py transport or some other programmatic MTA delivery not using aliases is...
Ubuntu 14.04 LTS : Mailman vulnerability (USN-2558-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2558-1 advisory. It was discovered that Mailman incorrectly handled special characters in list names. A local attacker could use this issue to perform a path traversal attack and...
Debian DSA-3214-1 : mailman - security update
A path traversal vulnerability was discovered in Mailman, the mailing list manager. Installations using a transport script such as postfix-to-mailman.py to interface with their MTA instead of static aliases were vulnerable to a path traversal attack. To successfully exploit this, an attacker need...
Ubuntu: Security Advisory (USN-2558-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2558-1: Mailman vulnerability
It was discovered that Mailman incorrectly handled special characters in list names. A local attacker could use this issue to perform a path traversal attack and execute arbitrary code as the Mailman user...
USN-2558-1 mailman vulnerability
It was discovered that Mailman incorrectly handled special characters in list names. A local attacker could use this issue to perform a path traversal attack and execute arbitrary code as the Mailman user...
Debian DLA-186-1 : mailman security update
A path traversal vulnerability was discovered in Mailman, the mailing list manager. Installations using a transport script such as postfix-to-mailman.py to interface with their MTA instead of static aliases were vulnerable to a path traversal attack. To successfully exploit this, an attacker need...
mailman directory traversal
Directory traversal via transport scripts...
[SECURITY] [DSA 3214-1] mailman security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3214-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 06, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA 186-1] mailman security update
Package : mailman Version : 1:2.1.13-6 CVE ID : CVE-2015-2775 Debian Bug : 781626 A path traversal vulnerability was discovered in Mailman, the mailing list manager. Installations using a transport script such as postfix-to-mailman.py to interface with their MTA instead of static aliases were...
[SECURITY] [DSA 3214-1] mailman security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3214-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 06, 2015 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3214-1 (mailman - security update)
A path traversal vulnerability was discovered in Mailman, the mailing list manager. Installations using a transport script such as postfix-to-mailman.py to interface with their MTA instead of static aliases were vulnerable to a path traversal attack. To successfully exploit this, an attacker need...
DLA-186-1 mailman - security update
Bulletin has no description...
DSA-3214-1 mailman - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3214-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
