| Package | Affected versions | Patched versions |
|---|---|---|
| majordomo 2 | = 20110101= 20110102= 20110103= 20110104= 20110105= 20110106= 20110107= 20110108= 20110109= 20110110= 20110111= 20110112= 20110113= 20110114= 20110115= 20110116= 20110117= 20110118= 20110119= 20110120= 20110121= 20110122= 20110123= 20110124= 20110125= 20110126= 20110127= 20110128= 20110129= 20110130= 20110131= 20110201= 20110202≤ 20110203 |
The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./.../ sequence in the "extra" parameter to the help command, which causes the regular expression to produce .. (dot dot) sequences. NOTE: this vulnerability is due to an incomplete fix for CVE-2011-0049.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free