medium5.0Public exploit code
CVE-2011-0063
The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arb…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Majordomo2 - 'SMTP/HTTP' Directory Traversal2011-02-03 · remote · multiple · Verified
Impact
The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./.../ sequence in the "extra" parameter to the help command, which causes the regular expression to produce .. (dot dot) sequences. NOTE: this vulnerability is due to an incomplete fix for CVE-2011-0049.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mj2 | Majordomo 2 | through 20110203 Versions 20110101, 20110102, 20110103, 20110104, 20110105 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/43631
- http://securityreason.com/securityalert/8133
- http://sotiriu.de/adv/NSOADV-2011-003.txt
- http://www.securityfocus.com/archive/1/516923/100/0/threaded
- https://bugzilla.mozilla.org/show_bug.cgi?id=631307
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66011
- http://secunia.com/advisories/43631
- http://securityreason.com/securityalert/8133
- http://sotiriu.de/adv/NSOADV-2011-003.txt
- http://www.securityfocus.com/archive/1/516923/100/0/threaded
- https://bugzilla.mozilla.org/show_bug.cgi?id=631307
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66011