CVE Feed

    Dashboard / CVE / CVE-2011-0049

    CVE-2011-0049

    Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the help command, as demonstrated using (1) a crafted email and (2) cgi-bin/mj_wwwusr in the web interface.

    Published:Feb 4, 2011
    Last Modified:Apr 11, 2025
    EPS:Feb 4, 2011
    EPSS Score:0.91269
    CVSS Score:5

    Affected Products

    Vendor
    Mj2
    Product
    Majordomo 2

    Exploits

    http://www.securityfocus.com/bid/46127https://bugzilla.mozilla.org/show_bug.cgi?id=628064https://sitewat.ch/en/Advisory/View/1http://www.securityfocus.com/bid/46127https://bugzilla.mozilla.org/show_bug.cgi?id=628064https://sitewat.ch/en/Advisory/View/1https://www.exploit-db.com/exploits/16103

    References

    http://osvdb.org/70762
    http://secunia.com/advisories/43125
    http://securityreason.com/securityalert/8061
    http://www.exploit-db.com/exploits/16103
    http://www.kb.cert.org/vuls/id/363726
    http://www.securityfocus.com/archive/1/516150/100/0/threaded
    http://www.securityfocus.com/bid/46127
    http://www.securitytracker.com/id?1025024
    http://www.vupen.com/english/advisories/2011/0288
    https://bug628064.bugzilla.mozilla.org/attachment.cgi?id=506481
    https://bugzilla.mozilla.org/show_bug.cgi?id=628064
    https://exchange.xforce.ibmcloud.com/vulnerabilities/65113
    https://sitewat.ch/en/Advisory/View/1
    http://osvdb.org/70762
    http://secunia.com/advisories/43125
    http://securityreason.com/securityalert/8061
    http://www.exploit-db.com/exploits/16103
    http://www.kb.cert.org/vuls/id/363726
    http://www.securityfocus.com/archive/1/516150/100/0/threaded
    http://www.securityfocus.com/bid/46127
    http://www.securitytracker.com/id?1025024
    http://www.vupen.com/english/advisories/2011/0288
    https://bug628064.bugzilla.mozilla.org/attachment.cgi?id=506481
    https://bugzilla.mozilla.org/show_bug.cgi?id=628064
    https://exchange.xforce.ibmcloud.com/vulnerabilities/65113
    https://sitewat.ch/en/Advisory/View/1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High