Description

Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences.

Remediation

References

CVE-2005-0202

Related Vulnerabilities

WordPress Plugin EWWW Image Optimizer Cross-Site Scripting (2.0.1)

WordPress Plugin Brute Force Login Protection Unspecified Vulnerability (1.5)

Joomla! Core Multiple Vulnerabilities (1.5.0 - 3.7.2)

Envoy mishandles dropped and truncated datagrams Issue (CVE-2020-35471)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Information Disclosure (3.4.7)

Severity

Medium

Classification

CVE-2005-0202

Tags

Missing Update Known Vulnerabilities