CVE-2015-2775 Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. (dot dot) in a list name.
HighCVSS 7.6
EPSS 7.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. (dot dot) in a list name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| GNU mailman | <= 2.1.19 | No fix listed |
References
- FEDORA-2015-5333 vendor-advisory
- FEDORA-2015-5216 vendor-advisory
- RHSA-2015:1153 vendor-advisory
- RHSA-2015:1417 vendor-advisory
- DSA-3214 vendor-advisory
- 73922 vdb-entry
- 1032033 vdb-entry
- USN-2558-1 vendor-advisory
- bugs.launchpad.net
- [Mailman-Announce] 20150327 Mailman 2.1.20 release mailing-list
- [Mailman-Developers] 20150327 Security patch and Mailman 2.1.20 to be released on 31 March mailing-list vendor-advisory
- [Mailman-Developers] 20150331 Security patch and Mailman 2.1.20 to be released on 31 March exploit mailing-list