CVE-2020-29668

概要

参考情報

• bugs.debian.org/cgi-bin/bugreport.cgi · Mailing List
• sympa-community/sympa · Release Notes
• sympa-community/sympa · Exploit
• sympa-community/sympa#1044 · Patch
• lists.debian.org/debian-lts-announce/2020/12/msg00026.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFZWDEKQFW3EH665OECDWIWM2MI7T53Y
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JICIHAJKKCZXJNIICUDYXGZFQCN6J4U6
• debian.org/security/2020/dsa-4818 · Third Party Advisory

sympa のその他の脆弱性

• CVE-2021-46900高 7.5Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an …
• CVE-2020-26932中 4.3debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, whereas the intended pe…
• CVE-2020-26880高 7.8Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full root access by modifying the sympa.conf conf…
• CVE-2020-10936高 7.8Sympa before 6.2.56 allows privilege escalation.
• CVE-2020-9369高 7.5Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files, and a flood of noti…