CVE-2012-2352
First published: Thu May 31 2012(Updated: )
The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the (1) do_arc_manage, (2) do_arc_download, or (3) do_arc_delete functions.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sympa Sympa | <=6.1.10 | |
| Sympa Sympa | =0.001 | |
| Sympa Sympa | =0.002 | |
| Sympa Sympa | =0.003 | |
| Sympa Sympa | =0.004 | |
| Sympa Sympa | =0.005 | |
| Sympa Sympa | =0.006 | |
| Sympa Sympa | =0.007 | |
| Sympa Sympa | =0.008 | |
| Sympa Sympa | =0.009 | |
| Sympa Sympa | =0.010 | |
| Sympa Sympa | =0.011 | |
| Sympa Sympa | =1.2.0 | |
| Sympa Sympa | =1.2.1 | |
| Sympa Sympa | =1.2.2 | |
| Sympa Sympa | =1.3.0 | |
| Sympa Sympa | =1.3.1 | |
| Sympa Sympa | =1.3.1-2 | |
| Sympa Sympa | =1.3.2 | |
| Sympa Sympa | =1.3.3 | |
| Sympa Sympa | =1.3.4 | |
| Sympa Sympa | =1.3.4-1 | |
| Sympa Sympa | =1.4.0 | |
| Sympa Sympa | =1.4.1 | |
| Sympa Sympa | =1.4.2 | |
| Sympa Sympa | =1.4.2-1 | |
| Sympa Sympa | =1.5 | |
| Sympa Sympa | =2.2.1b | |
| Sympa Sympa | =2.2.2b | |
| Sympa Sympa | =2.2.3b | |
| Sympa Sympa | =2.2.4 | |
| Sympa Sympa | =2.2.5 | |
| Sympa Sympa | =2.2.6 | |
| Sympa Sympa | =2.2.7 | |
| Sympa Sympa | =2.2b | |
| Sympa Sympa | =2.3-beta | |
| Sympa Sympa | =2.3.0 | |
| Sympa Sympa | =2.3.1 | |
| Sympa Sympa | =2.3.2 | |
| Sympa Sympa | =2.3.3 | |
| Sympa Sympa | =2.3.4 | |
| Sympa Sympa | =2.4 | |
| Sympa Sympa | =2.5 | |
| Sympa Sympa | =2.5.1 | |
| Sympa Sympa | =2.5.2 | |
| Sympa Sympa | =2.5.3b | |
| Sympa Sympa | =2.5.4b | |
| Sympa Sympa | =2.6 | |
| Sympa Sympa | =2.6.1 | |
| Sympa Sympa | =2.7 | |
| Sympa Sympa | =2.7.1 | |
| Sympa Sympa | =2.7.2 | |
| Sympa Sympa | =2.7.3 | |
| Sympa Sympa | =2.7a | |
| Sympa Sympa | =2.7b.1 | |
| Sympa Sympa | =2.7b.2 | |
| Sympa Sympa | =2.7b.3 | |
| Sympa Sympa | =3.0 | |
| Sympa Sympa | =3.0a | |
| Sympa Sympa | =3.0a.1 | |
| Sympa Sympa | =3.0b.4 | |
| Sympa Sympa | =3.0b.8 | |
| Sympa Sympa | =3.0b.9 | |
| Sympa Sympa | =3.1 | |
| Sympa Sympa | =3.1.1 | |
| Sympa Sympa | =3.1b.7 | |
| Sympa Sympa | =3.1b.8 | |
| Sympa Sympa | =3.1b.9 | |
| Sympa Sympa | =3.1b.10 | |
| Sympa Sympa | =3.1b.12 | |
| Sympa Sympa | =3.1b.13 | |
| Sympa Sympa | =3.2 | |
| Sympa Sympa | =3.2.1 | |
| Sympa Sympa | =3.2.2a | |
| Sympa Sympa | =3.3 | |
| Sympa Sympa | =3.3.1 | |
| Sympa Sympa | =3.3.3 | |
| Sympa Sympa | =3.3.4b.3 | |
| Sympa Sympa | =3.3.4b.4 | |
| Sympa Sympa | =3.3.4b.5 | |
| Sympa Sympa | =3.3.4b.6 | |
| Sympa Sympa | =3.3.4b.7 | |
| Sympa Sympa | =3.3.4b.8 | |
| Sympa Sympa | =3.3.4b.9 | |
| Sympa Sympa | =3.3.5 | |
| Sympa Sympa | =3.3.6b.1 | |
| Sympa Sympa | =3.3.6b.2 | |
| Sympa Sympa | =3.3.6b.3 | |
| Sympa Sympa | =3.3.6b.4 | |
| Sympa Sympa | =3.3.6b.5 | |
| Sympa Sympa | =3.3.6b.6 | |
| Sympa Sympa | =3.3b.3 | |
| Sympa Sympa | =3.3b.4 | |
| Sympa Sympa | =3.4 | |
| Sympa Sympa | =4.0.a1 | |
| Sympa Sympa | =4.0.a3 | |
| Sympa Sympa | =4.0.a4 | |
| Sympa Sympa | =4.0.a5 | |
| Sympa Sympa | =4.0.a6 | |
| Sympa Sympa | =4.0.a7 | |
| Sympa Sympa | =4.0.a8 | |
| Sympa Sympa | =4.0.a9 | |
| Sympa Sympa | =4.0.b1 | |
| Sympa Sympa | =4.0.b2 | |
| Sympa Sympa | =4.0.b3 | |
| Sympa Sympa | =4.1 | |
| Sympa Sympa | =4.2b.1 | |
| Sympa Sympa | =4.2b.3 | |
| Sympa Sympa | =5.0 | |
| Sympa Sympa | =5.0a | |
| Sympa Sympa | =5.0a.1 | |
| Sympa Sympa | =5.0b | |
| Sympa Sympa | =5.0b.1 | |
| Sympa Sympa | =5.1 | |
| Sympa Sympa | =5.1.2 | |
| Sympa Sympa | =5.2 | |
| Sympa Sympa | =5.2b | |
| Sympa Sympa | =5.2b2 | |
| Sympa Sympa | =5.3 | |
| Sympa Sympa | =5.3.2 | |
| Sympa Sympa | =5.3a.8 | |
| Sympa Sympa | =5.3a.9 | |
| Sympa Sympa | =5.3a.10 | |
| Sympa Sympa | =5.3b.1 | |
| Sympa Sympa | =5.3b.3 | |
| Sympa Sympa | =5.3b.4 | |
| Sympa Sympa | =5.3b.5 | |
| Sympa Sympa | =5.4 | |
| Sympa Sympa | =5.4.1 | |
| Sympa Sympa | =5.4.2 | |
| Sympa Sympa | =5.4.3 | |
| Sympa Sympa | =5.4a.2 | |
| Sympa Sympa | =5.4a.4 | |
| Sympa Sympa | =5.4b.1 | |
| Sympa Sympa | =6.0 | |
| Sympa Sympa | =6.0.1 | |
| Sympa Sympa | =6.0.2 | |
| Sympa Sympa | =6.0.3 | |
| Sympa Sympa | =6.0.4 | |
| Sympa Sympa | =6.0.5 | |
| Sympa Sympa | =6.0.6 | |
| Sympa Sympa | =6.0b.1 | |
| Sympa Sympa | =6.0b.2 | |
| Sympa Sympa | =6.0b.3 | |
| Sympa Sympa | =6.0b.4 | |
| Sympa Sympa | =6.1.1 | |
| Sympa Sympa | =6.1.2 | |
| Sympa Sympa | =6.1.3 | |
| Sympa Sympa | =6.1.4 | |
| Sympa Sympa | =6.1.5 | |
| Sympa Sympa | =6.1.6 | |
| Sympa Sympa | =6.1.7 | |
| Sympa Sympa | =6.1.8 | |
| Sympa Sympa | =6.1.9 | |
| Sympa Sympa | =6.1b.1 | |
| Sympa Sympa | =6.1b.2 | |
| Sympa Sympa | =6.1b.3 | |
| Sympa Sympa | =6.1b.4 | |
| Sympa Sympa | =6.1b.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/49045
- http://secunia.com/advisories/49237
- http://www.debian.org/security/2012/dsa-2477
- http://www.openwall.com/lists/oss-security/2012/05/11/8
- http://www.openwall.com/lists/oss-security/2012/05/12/2
- http://www.openwall.com/lists/oss-security/2012/05/12/8
- http://www.osvdb.org/81890
- http://www.securityfocus.com/bid/53503
- https://sourcesup.renater.fr/scm/viewvc.php/branches/sympa-6.0-branch/wwsympa/wwsympa.fcgi.in?root=sympa&r1=6706&r2=7358&pathrev=7358
- https://www.sympa.org/distribution/latest-stable/NEWS
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/description
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sympa
- canonical/sympa sympa
- version/sympa sympa/6.1.10
- version/sympa sympa/0.001
- version/sympa sympa/0.002
- version/sympa sympa/0.003
- version/sympa sympa/0.004
- version/sympa sympa/0.005
- version/sympa sympa/0.006
- version/sympa sympa/0.007
- version/sympa sympa/0.008
- version/sympa sympa/0.009
- version/sympa sympa/0.010
- version/sympa sympa/0.011
- version/sympa sympa/1.2.0
- version/sympa sympa/1.2.1
- version/sympa sympa/1.2.2
- version/sympa sympa/1.3.0
- version/sympa sympa/1.3.1
- version/sympa sympa/1.3.1-2
- version/sympa sympa/1.3.2
- version/sympa sympa/1.3.3
- version/sympa sympa/1.3.4
- version/sympa sympa/1.3.4-1
- version/sympa sympa/1.4.0
- version/sympa sympa/1.4.1
- version/sympa sympa/1.4.2
- version/sympa sympa/1.4.2-1
- version/sympa sympa/1.5
- version/sympa sympa/2.2.1b
- version/sympa sympa/2.2.2b
- version/sympa sympa/2.2.3b
- version/sympa sympa/2.2.4
- version/sympa sympa/2.2.5
- version/sympa sympa/2.2.6
- version/sympa sympa/2.2.7
- version/sympa sympa/2.2b
- version/sympa sympa/2.3-beta
- version/sympa sympa/2.3.0
- version/sympa sympa/2.3.1
- version/sympa sympa/2.3.2
- version/sympa sympa/2.3.3
- version/sympa sympa/2.3.4
- version/sympa sympa/2.4
- version/sympa sympa/2.5
- version/sympa sympa/2.5.1
- version/sympa sympa/2.5.2
- version/sympa sympa/2.5.3b
- version/sympa sympa/2.5.4b
- version/sympa sympa/2.6
- version/sympa sympa/2.6.1
- version/sympa sympa/2.7
- version/sympa sympa/2.7.1
- version/sympa sympa/2.7.2
- version/sympa sympa/2.7.3
- version/sympa sympa/2.7a
- version/sympa sympa/2.7b.1
- version/sympa sympa/2.7b.2
- version/sympa sympa/2.7b.3
- version/sympa sympa/3.0
- version/sympa sympa/3.0a
- version/sympa sympa/3.0a.1
- version/sympa sympa/3.0b.4
- version/sympa sympa/3.0b.8
- version/sympa sympa/3.0b.9
- version/sympa sympa/3.1
- version/sympa sympa/3.1.1
- version/sympa sympa/3.1b.7
- version/sympa sympa/3.1b.8
- version/sympa sympa/3.1b.9
- version/sympa sympa/3.1b.10
- version/sympa sympa/3.1b.12
- version/sympa sympa/3.1b.13
- version/sympa sympa/3.2
- version/sympa sympa/3.2.1
- version/sympa sympa/3.2.2a
- version/sympa sympa/3.3
- version/sympa sympa/3.3.1
- version/sympa sympa/3.3.3
- version/sympa sympa/3.3.4b.3
- version/sympa sympa/3.3.4b.4
- version/sympa sympa/3.3.4b.5
- version/sympa sympa/3.3.4b.6
- version/sympa sympa/3.3.4b.7
- version/sympa sympa/3.3.4b.8
- version/sympa sympa/3.3.4b.9
- version/sympa sympa/3.3.5
- version/sympa sympa/3.3.6b.1
- version/sympa sympa/3.3.6b.2
- version/sympa sympa/3.3.6b.3
- version/sympa sympa/3.3.6b.4
- version/sympa sympa/3.3.6b.5
- version/sympa sympa/3.3.6b.6
- version/sympa sympa/3.3b.3
- version/sympa sympa/3.3b.4
- version/sympa sympa/3.4
- version/sympa sympa/4.0.a1
- version/sympa sympa/4.0.a3
- version/sympa sympa/4.0.a4
- version/sympa sympa/4.0.a5
- version/sympa sympa/4.0.a6
- version/sympa sympa/4.0.a7
- version/sympa sympa/4.0.a8
- version/sympa sympa/4.0.a9
- version/sympa sympa/4.0.b1
- version/sympa sympa/4.0.b2
- version/sympa sympa/4.0.b3
- version/sympa sympa/4.1
- version/sympa sympa/4.2b.1
- version/sympa sympa/4.2b.3
- version/sympa sympa/5.0
- version/sympa sympa/5.0a
- version/sympa sympa/5.0a.1
- version/sympa sympa/5.0b
- version/sympa sympa/5.0b.1
- version/sympa sympa/5.1
- version/sympa sympa/5.1.2
- version/sympa sympa/5.2
- version/sympa sympa/5.2b
- version/sympa sympa/5.2b2
- version/sympa sympa/5.3
- version/sympa sympa/5.3.2
- version/sympa sympa/5.3a.8
- version/sympa sympa/5.3a.9
- version/sympa sympa/5.3a.10
- version/sympa sympa/5.3b.1
- version/sympa sympa/5.3b.3
- version/sympa sympa/5.3b.4
- version/sympa sympa/5.3b.5
- version/sympa sympa/5.4
- version/sympa sympa/5.4.1
- version/sympa sympa/5.4.2
- version/sympa sympa/5.4.3
- version/sympa sympa/5.4a.2
- version/sympa sympa/5.4a.4
- version/sympa sympa/5.4b.1
- version/sympa sympa/6.0
- version/sympa sympa/6.0.1
- version/sympa sympa/6.0.2
- version/sympa sympa/6.0.3
- version/sympa sympa/6.0.4
- version/sympa sympa/6.0.5
- version/sympa sympa/6.0.6
- version/sympa sympa/6.0b.1
- version/sympa sympa/6.0b.2
- version/sympa sympa/6.0b.3
- version/sympa sympa/6.0b.4
- version/sympa sympa/6.1.1
- version/sympa sympa/6.1.2
- version/sympa sympa/6.1.3
- version/sympa sympa/6.1.4
- version/sympa sympa/6.1.5
- version/sympa sympa/6.1.6
- version/sympa sympa/6.1.7
- version/sympa sympa/6.1.8
- version/sympa sympa/6.1.9
- version/sympa sympa/6.1b.1
- version/sympa sympa/6.1b.2
- version/sympa sympa/6.1b.3
- version/sympa sympa/6.1b.4
- version/sympa sympa/6.1b.6