| Package | Affected versions | Patched versions |
|---|---|---|
| majordomo 2 | = 20110101= 20110102= 20110103= 20110104= 20110105= 20110106= 20110107= 20110108= 20110109= 20110110= 20110111= 20110112= 20110113= 20110114= 20110115= 20110116= 20110117= 20110118= 20110119= 20110120= 20110121= 20110122= 20110123= 20110124= 20110125= 20110126= 20110127= 20110128= 20110129≤ 20110130 |
Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the help command, as demonstrated using (1) a crafted email and (2) cgi-bin/mj_wwwusr in the web interface.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free