CVE-2012-2352 The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives v...
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the (1) do_arc_manage, (2) do_arc_download, or (3) do_arc_delete functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/sympa(Debian:12) | < 6.1.11~dfsg-1 | 6.1.11~dfsg-1 |
| debian/sympa(Debian:13) | < 6.1.11~dfsg-1 | 6.1.11~dfsg-1 |
| debian/sympa(Debian:14) | < 6.1.11~dfsg-1 | 6.1.11~dfsg-1 |
| sympa | <= 6.1.10 | No fix listed |
| sympa | = 0.001 | No fix listed |
| sympa | = 0.002 | No fix listed |
| sympa | = 0.003 | No fix listed |
| sympa | = 0.004 | No fix listed |
| sympa | = 0.005 | No fix listed |
| sympa | = 0.006 | No fix listed |
| sympa | = 0.007 | No fix listed |
| sympa | = 0.008 | No fix listed |
| sympa | = 0.009 | No fix listed |
| sympa | = 0.010 | No fix listed |
| sympa | = 0.011 | No fix listed |
| sympa | = 1.2.0 | No fix listed |
| sympa | = 1.2.1 | No fix listed |
| sympa | = 1.2.2 | No fix listed |
| sympa | = 1.3.0 | No fix listed |
| sympa | = 1.3.1 | No fix listed |
| sympa | = 1.3.1-2 | No fix listed |
| sympa | = 1.3.2 | No fix listed |
| sympa | = 1.3.3 | No fix listed |
| sympa | = 1.3.4 | No fix listed |
| sympa | = 1.3.4-1 | No fix listed |
Show 137 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sympa | = 1.4.0 | No fix listed |
| sympa | = 1.4.1 | No fix listed |
| sympa | = 1.4.2 | No fix listed |
| sympa | = 1.4.2-1 | No fix listed |
| sympa | = 1.5 | No fix listed |
| sympa | = 2.2.1b | No fix listed |
| sympa | = 2.2.2b | No fix listed |
| sympa | = 2.2.3b | No fix listed |
| sympa | = 2.2.4 | No fix listed |
| sympa | = 2.2.5 | No fix listed |
| sympa | = 2.2.6 | No fix listed |
| sympa | = 2.2.7 | No fix listed |
| sympa | = 2.2b | No fix listed |
| sympa | = 2.3-beta | No fix listed |
| sympa | = 2.3.0 | No fix listed |
| sympa | = 2.3.1 | No fix listed |
| sympa | = 2.3.2 | No fix listed |
| sympa | = 2.3.3 | No fix listed |
| sympa | = 2.3.4 | No fix listed |
| sympa | = 2.4 | No fix listed |
| sympa | = 2.5 | No fix listed |
| sympa | = 2.5.1 | No fix listed |
| sympa | = 2.5.2 | No fix listed |
| sympa | = 2.5.3b | No fix listed |
| sympa | = 2.5.4b | No fix listed |
| sympa | = 2.6 | No fix listed |
| sympa | = 2.6.1 | No fix listed |
| sympa | = 2.7 | No fix listed |
| sympa | = 2.7.1 | No fix listed |
| sympa | = 2.7.2 | No fix listed |
| sympa | = 2.7.3 | No fix listed |
| sympa | = 2.7a | No fix listed |
| sympa | = 2.7b.1 | No fix listed |
| sympa | = 2.7b.2 | No fix listed |
| sympa | = 2.7b.3 | No fix listed |
| sympa | = 3.0 | No fix listed |
| sympa | = 3.0a | No fix listed |
| sympa | = 3.0a.1 | No fix listed |
| sympa | = 3.0b.4 | No fix listed |
| sympa | = 3.0b.8 | No fix listed |
| sympa | = 3.0b.9 | No fix listed |
| sympa | = 3.1 | No fix listed |
| sympa | = 3.1.1 | No fix listed |
| sympa | = 3.1b.7 | No fix listed |
| sympa | = 3.1b.8 | No fix listed |
| sympa | = 3.1b.9 | No fix listed |
| sympa | = 3.1b.10 | No fix listed |
| sympa | = 3.1b.12 | No fix listed |
| sympa | = 3.1b.13 | No fix listed |
| sympa | = 3.2 | No fix listed |
| sympa | = 3.2.1 | No fix listed |
| sympa | = 3.2.2a | No fix listed |
| sympa | = 3.3 | No fix listed |
| sympa | = 3.3.1 | No fix listed |
| sympa | = 3.3.3 | No fix listed |
| sympa | = 3.3.4b.3 | No fix listed |
| sympa | = 3.3.4b.4 | No fix listed |
| sympa | = 3.3.4b.5 | No fix listed |
| sympa | = 3.3.4b.6 | No fix listed |
| sympa | = 3.3.4b.7 | No fix listed |
| sympa | = 3.3.4b.8 | No fix listed |
| sympa | = 3.3.4b.9 | No fix listed |
| sympa | = 3.3.5 | No fix listed |
| sympa | = 3.3.6b.1 | No fix listed |
| sympa | = 3.3.6b.2 | No fix listed |
| sympa | = 3.3.6b.3 | No fix listed |
| sympa | = 3.3.6b.4 | No fix listed |
| sympa | = 3.3.6b.5 | No fix listed |
| sympa | = 3.3.6b.6 | No fix listed |
| sympa | = 3.3b.3 | No fix listed |
| sympa | = 3.3b.4 | No fix listed |
| sympa | = 3.4 | No fix listed |
| sympa | = 4.0.a1 | No fix listed |
| sympa | = 4.0.a3 | No fix listed |
| sympa | = 4.0.a4 | No fix listed |
| sympa | = 4.0.a5 | No fix listed |
| sympa | = 4.0.a6 | No fix listed |
| sympa | = 4.0.a7 | No fix listed |
| sympa | = 4.0.a8 | No fix listed |
| sympa | = 4.0.a9 | No fix listed |
| sympa | = 4.0.b1 | No fix listed |
| sympa | = 4.0.b2 | No fix listed |
| sympa | = 4.0.b3 | No fix listed |
| sympa | = 4.1 | No fix listed |
| sympa | = 4.2b.1 | No fix listed |
| sympa | = 4.2b.3 | No fix listed |
| sympa | = 5.0 | No fix listed |
| sympa | = 5.0a | No fix listed |
| sympa | = 5.0a.1 | No fix listed |
| sympa | = 5.0b | No fix listed |
| sympa | = 5.0b.1 | No fix listed |
| sympa | = 5.1 | No fix listed |
| sympa | = 5.1.2 | No fix listed |
| sympa | = 5.2 | No fix listed |
| sympa | = 5.2b | No fix listed |
| sympa | = 5.2b2 | No fix listed |
| sympa | = 5.3 | No fix listed |
| sympa | = 5.3.2 | No fix listed |
| sympa | = 5.3a.8 | No fix listed |
| sympa | = 5.3a.9 | No fix listed |
| sympa | = 5.3a.10 | No fix listed |
| sympa | = 5.3b.1 | No fix listed |
| sympa | = 5.3b.3 | No fix listed |
| sympa | = 5.3b.4 | No fix listed |
| sympa | = 5.3b.5 | No fix listed |
| sympa | = 5.4 | No fix listed |
| sympa | = 5.4.1 | No fix listed |
| sympa | = 5.4.2 | No fix listed |
| sympa | = 5.4.3 | No fix listed |
| sympa | = 5.4a.2 | No fix listed |
| sympa | = 5.4a.4 | No fix listed |
| sympa | = 5.4b.1 | No fix listed |
| sympa | = 6.0 | No fix listed |
| sympa | = 6.0.1 | No fix listed |
| sympa | = 6.0.2 | No fix listed |
| sympa | = 6.0.3 | No fix listed |
| sympa | = 6.0.4 | No fix listed |
| sympa | = 6.0.5 | No fix listed |
| sympa | = 6.0.6 | No fix listed |
| sympa | = 6.0b.1 | No fix listed |
| sympa | = 6.0b.2 | No fix listed |
| sympa | = 6.0b.3 | No fix listed |
| sympa | = 6.0b.4 | No fix listed |
| sympa | = 6.1.1 | No fix listed |
| sympa | = 6.1.2 | No fix listed |
| sympa | = 6.1.3 | No fix listed |
| sympa | = 6.1.4 | No fix listed |
| sympa | = 6.1.5 | No fix listed |
| sympa | = 6.1.6 | No fix listed |
| sympa | = 6.1.7 | No fix listed |
| sympa | = 6.1.8 | No fix listed |
| sympa | = 6.1.9 | No fix listed |
| sympa | = 6.1b.1 | No fix listed |
| sympa | = 6.1b.2 | No fix listed |
| sympa | = 6.1b.3 | No fix listed |
| sympa | = 6.1b.4 | No fix listed |
| sympa | = 6.1b.6 | No fix listed |
References
- Debian Security Tracker CVE-2012-2352 vendor-advisory
- 49045 third-party-advisory vendor-advisory
- 49237 third-party-advisory vendor-advisory
- DSA-2477 vendor-advisory
- [oss-security] 20120511 CVE request: sympa (try again) mailing-list
- [oss-security] 20120511 Re: CVE request: sympa (try again) mailing-list
- [oss-security] 20120512 Re: CVE request: sympa (try again) mailing-list
- 81890 vdb-entry
- 53503 vdb-entry
- sourcesup.renater.fr
- www.sympa.org
- bugs.debian.org issue-tracking