Updated sympa packages fix CVE-2015-1306

Updated sympa packages fix security vulnerability: A vulnerability have been discovered in Sympa web interface that allows access to files on the server filesystem. This breach allows to send to a list or a user any file readable by the Sympa user, located on the server filesystem, using the Symp...

PT-2017-5801

Name of the Vulnerable Software and Affected Versions Sympa affected versions not specified Description A security issue has been found in the Sympa web interface, allowing access to files on the server filesystem. This issue enables sending any file readable by the Sympa user, located on the...

[SECURITY] [DLA 148-1] sympa security update

Package : sympa Version : 6.0.1+dfsg-4+squeeze3 CVE ID : CVE-2015-1306 A vulnerability has been discovered in the web interface of sympa, a mailing list manager. An attacker could take advantage of this flaw in the newsletter posting area, which allows sending to a list, or to oneself, any file...

DLA-148-1 sympa - security update

Bulletin has no description...

CVE-2015-1306

The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors...

Design/Logic Flaw

The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2015-1306: Exposure of Sensitive Information to an Unauthorized Actor

The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors...

PT-2015-5198

Name of the Vulnerable Software and Affected Versions Sympa versions 6.0.x through 6.0.9 Sympa versions 6.1.x through 6.1.23 Description The issue affects the newsletter posting area in the web interface, allowing remote attackers to read arbitrary files. Recommendations For Sympa versions 6.0.x...