Description (CNA)
The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:051
- http://www.openwall.com/lists/oss-security/2015/01/20/4
- https://www.sympa.org/security_advisories
- http://secunia.com/advisories/62387
- http://www.securityfocus.com/bid/72277
- http://secunia.com/advisories/62442
- http://advisories.mageia.org/MGASA-2015-0085.html
- http://www.debian.org/security/2015/dsa-3134
ADP enrichment
No English description supplied.
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:051
- http://www.openwall.com/lists/oss-security/2015/01/20/4
- https://www.sympa.org/security_advisories
- http://secunia.com/advisories/62387
- http://www.securityfocus.com/bid/72277
- http://secunia.com/advisories/62442
- http://advisories.mageia.org/MGASA-2015-0085.html
- http://www.debian.org/security/2015/dsa-3134