The host is running Majordomo2 and is prone to directory traversal vulnerability.

Successful exploitation will allow attacker to obtain sensitive information that could aid in further attacks. Impact Level: Application

Upgrade to Majordomo2 Build 20110204 or later. For updates refer to http://www.mj2.org/

The flaw is caused by improper validation of user-supplied input via the 'help' parameter in 'mj_wwwusr', which allows attacker to read arbitrary files via directory traversal attacks.

Majordomo2 Build 20110203 and prior

• http://www.exploit-db.com/exploits/16103/
• https://bugzilla.mozilla.org/show_bug.cgi?id=628064
• https://sitewat.ch/en/Advisory/View/1

---

Updated on 2015-03-25