medium5.0
CVE-2015-1306
The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspe…
Impact
The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sympa | Sympa | Versions 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://advisories.mageia.org/MGASA-2015-0085.html
- http://secunia.com/advisories/62387
- http://secunia.com/advisories/62442
- http://www.debian.org/security/2015/dsa-3134
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:051
- http://www.openwall.com/lists/oss-security/2015/01/20/4
- http://www.securityfocus.com/bid/72277
- https://www.sympa.org/security_advisories
- http://advisories.mageia.org/MGASA-2015-0085.html
- http://secunia.com/advisories/62387
- http://secunia.com/advisories/62442
- http://www.debian.org/security/2015/dsa-3134
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:051
- http://www.openwall.com/lists/oss-security/2015/01/20/4
- http://www.securityfocus.com/bid/72277
- https://www.sympa.org/security_advisories