Red Hat Security AdvisoryRHSA-2015:1417
mailman security and bug fix update
Released 2015-07-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6) mailman-3:2.1.12-25.el6
- Red Hat Enterprise Linux Workstation (v. 6) mailman-3:2.1.12-25.el6
Fixes 2 records
Priority MEDIUM 44
Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a ..
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.07908 · Published 2015-04-13 · Partial fix CWE-22
Priority LOW 12
Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.0043 · Published 2003-04-02 · Partial fix
