CVE-2015-1306

Description

References

• advisories.mageia.org/MGASA-2015-0085.html
• secunia.com/advisories/62387
• secunia.com/advisories/62442
• debian.org/security/2015/dsa-3134
• mandriva.com/security/advisories
• openwall.com/lists/oss-security/2015/01/20/4
• securityfocus.com/bid/72277
• sympa.org/security_advisories · Patch

More vulnerabilities in sympa

• CVE-2021-46900HIGH 7.5Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an …
• CVE-2020-29668LOW 3.7Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired co…
• CVE-2020-26932MEDIUM 4.3debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, whereas the intended pe…
• CVE-2020-26880HIGH 7.8Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full root access by modifying the sympa.conf conf…
• CVE-2020-10936HIGH 7.8Sympa before 6.2.56 allows privilege escalation.