CVE-2020-26932

概要

参考情報

• bugs.debian.org/971904 · Vendor Advisory
• salsa.debian.org/sympa-team/sympa/-/merge_requests/1 · Mailing List
• debian.org/security/2020/dsa-4818 · Vendor Advisory

sympa のその他の脆弱性

• CVE-2021-46900高 7.5Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an …
• CVE-2020-29668低 3.7Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired co…
• CVE-2020-26880高 7.8Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full root access by modifying the sympa.conf conf…
• CVE-2020-10936高 7.8Sympa before 6.2.56 allows privilege escalation.
• CVE-2020-9369高 7.5Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files, and a flood of noti…