CVE-2011-0049 Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the he...
MediumCVSS 5.0
EPSS 95.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the help command, as demonstrated using (1) a crafted email and (2) cgi-bin/mj_wwwusr in the web interface.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mj2 majordomo 2 | <= 20110130 | No fix listed |
| mj2 majordomo 2 | = 20110101 | No fix listed |
| mj2 majordomo 2 | = 20110102 | No fix listed |
| mj2 majordomo 2 | = 20110103 | No fix listed |
| mj2 majordomo 2 | = 20110104 | No fix listed |
| mj2 majordomo 2 | = 20110105 | No fix listed |
| mj2 majordomo 2 | = 20110106 | No fix listed |
| mj2 majordomo 2 | = 20110107 | No fix listed |
| mj2 majordomo 2 | = 20110108 | No fix listed |
| mj2 majordomo 2 | = 20110109 | No fix listed |
| mj2 majordomo 2 | = 20110110 | No fix listed |
| mj2 majordomo 2 | = 20110111 | No fix listed |
| mj2 majordomo 2 | = 20110112 | No fix listed |
| mj2 majordomo 2 | = 20110113 | No fix listed |
| mj2 majordomo 2 | = 20110114 | No fix listed |
| mj2 majordomo 2 | = 20110115 | No fix listed |
| mj2 majordomo 2 | = 20110116 | No fix listed |
| mj2 majordomo 2 | = 20110117 | No fix listed |
| mj2 majordomo 2 | = 20110118 | No fix listed |
| mj2 majordomo 2 | = 20110119 | No fix listed |
| mj2 majordomo 2 | = 20110120 | No fix listed |
| mj2 majordomo 2 | = 20110121 | No fix listed |
| mj2 majordomo 2 | = 20110122 | No fix listed |
| mj2 majordomo 2 | = 20110123 | No fix listed |
| mj2 majordomo 2 | = 20110124 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mj2 majordomo 2 | = 20110125 | No fix listed |
| mj2 majordomo 2 | = 20110126 | No fix listed |
| mj2 majordomo 2 | = 20110127 | No fix listed |
| mj2 majordomo 2 | = 20110128 | No fix listed |
| mj2 majordomo 2 | = 20110129 | No fix listed |
References
- 70762 vdb-entry
- 43125 third-party-advisory vendor-advisory
- 8061 third-party-advisory
- 16103 exploit
- VU#363726 third-party-advisory us-government-resource
- 20110203 Majordomo2 - Directory Traversal (SMTP/HTTP) mailing-list
- 46127 exploit vdb-entry
- 1025024 vdb-entry
- ADV-2011-0288 vdb-entry
- bug628064.bugzilla.mozilla.org patch
- bugzilla.mozilla.org exploit patch
- majordomo-listfile-directory-traversal(65113) vdb-entry
- sitewat.ch exploit url-repurposed