Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via…
Priority LOW 27CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malformed value of the Content-Type header and unspecified other headers. NOTE: some of these details are obtained from third party information.
Why it matters now
EPSS 0.0215 82nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 129
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:sympa:sympa:0.001:*:*:*:*:*:*:* | 0.001 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:0.002:*:*:*:*:*:*:* | 0.002 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:0.003:*:*:*:*:*:*:* | 0.003 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:0.004:*:*:*:*:*:*:* | 0.004 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:0.005:*:*:*:*:*:*:* | 0.005 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:0.006:*:*:*:*:*:*:* | 0.006 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:0.007:*:*:*:*:*:*:* | 0.007 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:0.008:*:*:*:*:*:*:* | 0.008 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:0.009:*:*:*:*:*:*:* | 0.009 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:0.010:*:*:*:*:*:*:* | 0.010 | Vulnerable | Sympa |
- cpe:2.3:a:sympa:sympa:0.001:*:*:*:*:*:*:* Versions 0.001 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:0.002:*:*:*:*:*:*:* Versions 0.002 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:0.003:*:*:*:*:*:*:* Versions 0.003 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:0.004:*:*:*:*:*:*:* Versions 0.004 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:0.005:*:*:*:*:*:*:* Versions 0.005 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:0.006:*:*:*:*:*:*:* Versions 0.006 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:0.007:*:*:*:*:*:*:* Versions 0.007 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:0.008:*:*:*:*:*:*:* Versions 0.008 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:0.009:*:*:*:*:*:*:* Versions 0.009 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:0.010:*:*:*:*:*:*:* Versions 0.010 Vulnerable ·Sympa
Show 119 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:sympa:sympa:0.011:*:*:*:*:*:*:* | 0.011 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.2.0:*:*:*:*:*:*:* | 1.2.0 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.2.1:*:*:*:*:*:*:* | 1.2.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.2.2:*:*:*:*:*:*:* | 1.2.2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.3.0:*:*:*:*:*:*:* | 1.3.0 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.3.1:*:*:*:*:*:*:* | 1.3.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.3.1-2:*:*:*:*:*:*:* | 1.3.1-2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.3.2:*:*:*:*:*:*:* | 1.3.2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.3.3:*:*:*:*:*:*:* | 1.3.3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.3.4:*:*:*:*:*:*:* | 1.3.4 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.3.4-1:*:*:*:*:*:*:* | 1.3.4-1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.4.0:*:*:*:*:*:*:* | 1.4.0 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.4.2:*:*:*:*:*:*:* | 1.4.2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.4.2-1:*:*:*:*:*:*:* | 1.4.2-1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:1.5:*:*:*:*:*:*:* | 1.5 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.2.1b:*:*:*:*:*:*:* | 2.2.1b | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.2.2b:*:*:*:*:*:*:* | 2.2.2b | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.2.3b:*:*:*:*:*:*:* | 2.2.3b | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.2.4:*:*:*:*:*:*:* | 2.2.4 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.2.5:*:*:*:*:*:*:* | 2.2.5 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.2.6:*:*:*:*:*:*:* | 2.2.6 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.2.7:*:*:*:*:*:*:* | 2.2.7 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.2b:*:*:*:*:*:*:* | 2.2b | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.3.0:*:*:*:*:*:*:* | 2.3.0 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.3.1:*:*:*:*:*:*:* | 2.3.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.3.2:*:*:*:*:*:*:* | 2.3.2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.3.3:*:*:*:*:*:*:* | 2.3.3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.3.4:*:*:*:*:*:*:* | 2.3.4 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.3beta:*:*:*:*:*:*:* | 2.3beta | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.4:*:*:*:*:*:*:* | 2.4 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.5:*:*:*:*:*:*:* | 2.5 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.5.1:*:*:*:*:*:*:* | 2.5.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.5.2:*:*:*:*:*:*:* | 2.5.2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.5.3b:*:*:*:*:*:*:* | 2.5.3b | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.5.4b:*:*:*:*:*:*:* | 2.5.4b | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.6:*:*:*:*:*:*:* | 2.6 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.6.1:*:*:*:*:*:*:* | 2.6.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.7:*:*:*:*:*:*:* | 2.7 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.7.1:*:*:*:*:*:*:* | 2.7.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.7.2:*:*:*:*:*:*:* | 2.7.2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.7.3:*:*:*:*:*:*:* | 2.7.3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.7a:*:*:*:*:*:*:* | 2.7a | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.7b.1:*:*:*:*:*:*:* | 2.7b.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.7b.2:*:*:*:*:*:*:* | 2.7b.2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:2.7b.3:*:*:*:*:*:*:* | 2.7b.3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.0a:*:*:*:*:*:*:* | 3.0a | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.0a.1:*:*:*:*:*:*:* | 3.0a.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.0b.4:*:*:*:*:*:*:* | 3.0b.4 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.0b.8:*:*:*:*:*:*:* | 3.0b.8 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.0b.9:*:*:*:*:*:*:* | 3.0b.9 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.1:*:*:*:*:*:*:* | 3.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.1.1:*:*:*:*:*:*:* | 3.1.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.1b.7:*:*:*:*:*:*:* | 3.1b.7 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.1b.8:*:*:*:*:*:*:* | 3.1b.8 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.1b.9:*:*:*:*:*:*:* | 3.1b.9 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.1b.10:*:*:*:*:*:*:* | 3.1b.10 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.1b.12:*:*:*:*:*:*:* | 3.1b.12 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.1b.13:*:*:*:*:*:*:* | 3.1b.13 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.2:*:*:*:*:*:*:* | 3.2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.2.1:*:*:*:*:*:*:* | 3.2.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.2.2a:*:*:*:*:*:*:* | 3.2.2a | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3:*:*:*:*:*:*:* | 3.3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.1:*:*:*:*:*:*:* | 3.3.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.3:*:*:*:*:*:*:* | 3.3.3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.4b.3:*:*:*:*:*:*:* | 3.3.4b.3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.4b.4:*:*:*:*:*:*:* | 3.3.4b.4 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.4b.5:*:*:*:*:*:*:* | 3.3.4b.5 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.4b.6:*:*:*:*:*:*:* | 3.3.4b.6 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.4b.7:*:*:*:*:*:*:* | 3.3.4b.7 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.4b.8:*:*:*:*:*:*:* | 3.3.4b.8 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.4b.9:*:*:*:*:*:*:* | 3.3.4b.9 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.5:*:*:*:*:*:*:* | 3.3.5 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.6b.2:*:*:*:*:*:*:* | 3.3.6b.2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.6b.3:*:*:*:*:*:*:* | 3.3.6b.3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.6b.4:*:*:*:*:*:*:* | 3.3.6b.4 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.6b.5:*:*:*:*:*:*:* | 3.3.6b.5 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3.6b.6:*:*:*:*:*:*:* | 3.3.6b.6 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3a-vhost.10:*:*:*:*:*:*:* | 3.3a-vhost.10 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3b.3:*:*:*:*:*:*:* | 3.3b.3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.3b.4:*:*:*:*:*:*:* | 3.3b.4 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:3.4:*:*:*:*:*:*:* | 3.4 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.0.a1:*:*:*:*:*:*:* | 4.0.a1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.0.a3:*:*:*:*:*:*:* | 4.0.a3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.0.a4:*:*:*:*:*:*:* | 4.0.a4 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.0.a5:*:*:*:*:*:*:* | 4.0.a5 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.0.a6:*:*:*:*:*:*:* | 4.0.a6 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.0.a7:*:*:*:*:*:*:* | 4.0.a7 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.0.a8:*:*:*:*:*:*:* | 4.0.a8 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.0.a9:*:*:*:*:*:*:* | 4.0.a9 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.0.b1:*:*:*:*:*:*:* | 4.0.b1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.0.b2:*:*:*:*:*:*:* | 4.0.b2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.0.b3:*:*:*:*:*:*:* | 4.0.b3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.2b.1:*:*:*:*:*:*:* | 4.2b.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:4.2b.3:*:*:*:*:*:*:* | 4.2b.3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.0a:*:*:*:*:*:*:* | 5.0a | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.0a.1:*:*:*:*:*:*:* | 5.0a.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.0b:*:*:*:*:*:*:* | 5.0b | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.0b.1:*:*:*:*:*:*:* | 5.0b.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.1:*:*:*:*:*:*:* | 5.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.1.2:*:*:*:*:*:*:* | 5.1.2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.2:*:*:*:*:*:*:* | 5.2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.2b:*:*:*:*:*:*:* | 5.2b | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.2b2:*:*:*:*:*:*:* | 5.2b2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.3:*:*:*:*:*:*:* | 5.3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.3.2:*:*:*:*:*:*:* | 5.3.2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.3a.8:*:*:*:*:*:*:* | 5.3a.8 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.3a.9:*:*:*:*:*:*:* | 5.3a.9 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.3a.10:*:*:*:*:*:*:* | 5.3a.10 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.3b.1:*:*:*:*:*:*:* | 5.3b.1 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.3b.3:*:*:*:*:*:*:* | 5.3b.3 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.3b.4:*:*:*:*:*:*:* | 5.3b.4 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.3b.5:*:*:*:*:*:*:* | 5.3b.5 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.4a.2:*:*:*:*:*:*:* | 5.4a.2 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.4a.4:*:*:*:*:*:*:* | 5.4a.4 | Vulnerable | Sympa |
| cpe:2.3:a:sympa:sympa:5.4b.1:*:*:*:*:*:*:* | 5.4b.1 | Vulnerable | Sympa |
- cpe:2.3:a:sympa:sympa:0.011:*:*:*:*:*:*:* Versions 0.011 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.3.1-2:*:*:*:*:*:*:* Versions 1.3.1-2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.3.3:*:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.3.4:*:*:*:*:*:*:* Versions 1.3.4 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.3.4-1:*:*:*:*:*:*:* Versions 1.3.4-1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.4.2-1:*:*:*:*:*:*:* Versions 1.4.2-1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.2.1b:*:*:*:*:*:*:* Versions 2.2.1b Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.2.2b:*:*:*:*:*:*:* Versions 2.2.2b Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.2.3b:*:*:*:*:*:*:* Versions 2.2.3b Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.2.6:*:*:*:*:*:*:* Versions 2.2.6 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.2.7:*:*:*:*:*:*:* Versions 2.2.7 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.2b:*:*:*:*:*:*:* Versions 2.2b Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.3.0:*:*:*:*:*:*:* Versions 2.3.0 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.3.1:*:*:*:*:*:*:* Versions 2.3.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.3.2:*:*:*:*:*:*:* Versions 2.3.2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.3.3:*:*:*:*:*:*:* Versions 2.3.3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.3.4:*:*:*:*:*:*:* Versions 2.3.4 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.3beta:*:*:*:*:*:*:* Versions 2.3beta Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.5:*:*:*:*:*:*:* Versions 2.5 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.5.1:*:*:*:*:*:*:* Versions 2.5.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.5.2:*:*:*:*:*:*:* Versions 2.5.2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.5.3b:*:*:*:*:*:*:* Versions 2.5.3b Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.5.4b:*:*:*:*:*:*:* Versions 2.5.4b Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.6:*:*:*:*:*:*:* Versions 2.6 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.6.1:*:*:*:*:*:*:* Versions 2.6.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.7:*:*:*:*:*:*:* Versions 2.7 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.7.1:*:*:*:*:*:*:* Versions 2.7.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.7.2:*:*:*:*:*:*:* Versions 2.7.2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.7.3:*:*:*:*:*:*:* Versions 2.7.3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.7a:*:*:*:*:*:*:* Versions 2.7a Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.7b.1:*:*:*:*:*:*:* Versions 2.7b.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.7b.2:*:*:*:*:*:*:* Versions 2.7b.2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:2.7b.3:*:*:*:*:*:*:* Versions 2.7b.3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.0a:*:*:*:*:*:*:* Versions 3.0a Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.0a.1:*:*:*:*:*:*:* Versions 3.0a.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.0b.4:*:*:*:*:*:*:* Versions 3.0b.4 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.0b.8:*:*:*:*:*:*:* Versions 3.0b.8 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.0b.9:*:*:*:*:*:*:* Versions 3.0b.9 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.1b.7:*:*:*:*:*:*:* Versions 3.1b.7 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.1b.8:*:*:*:*:*:*:* Versions 3.1b.8 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.1b.9:*:*:*:*:*:*:* Versions 3.1b.9 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.1b.10:*:*:*:*:*:*:* Versions 3.1b.10 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.1b.12:*:*:*:*:*:*:* Versions 3.1b.12 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.1b.13:*:*:*:*:*:*:* Versions 3.1b.13 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.2.2a:*:*:*:*:*:*:* Versions 3.2.2a Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.3:*:*:*:*:*:*:* Versions 3.3.3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.4b.3:*:*:*:*:*:*:* Versions 3.3.4b.3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.4b.4:*:*:*:*:*:*:* Versions 3.3.4b.4 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.4b.5:*:*:*:*:*:*:* Versions 3.3.4b.5 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.4b.6:*:*:*:*:*:*:* Versions 3.3.4b.6 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.4b.7:*:*:*:*:*:*:* Versions 3.3.4b.7 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.4b.8:*:*:*:*:*:*:* Versions 3.3.4b.8 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.4b.9:*:*:*:*:*:*:* Versions 3.3.4b.9 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.5:*:*:*:*:*:*:* Versions 3.3.5 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.6b.2:*:*:*:*:*:*:* Versions 3.3.6b.2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.6b.3:*:*:*:*:*:*:* Versions 3.3.6b.3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.6b.4:*:*:*:*:*:*:* Versions 3.3.6b.4 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.6b.5:*:*:*:*:*:*:* Versions 3.3.6b.5 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3.6b.6:*:*:*:*:*:*:* Versions 3.3.6b.6 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3a-vhost.10:*:*:*:*:*:*:* Versions 3.3a-vhost.10 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3b.3:*:*:*:*:*:*:* Versions 3.3b.3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.3b.4:*:*:*:*:*:*:* Versions 3.3b.4 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.0.a1:*:*:*:*:*:*:* Versions 4.0.a1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.0.a3:*:*:*:*:*:*:* Versions 4.0.a3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.0.a4:*:*:*:*:*:*:* Versions 4.0.a4 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.0.a5:*:*:*:*:*:*:* Versions 4.0.a5 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.0.a6:*:*:*:*:*:*:* Versions 4.0.a6 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.0.a7:*:*:*:*:*:*:* Versions 4.0.a7 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.0.a8:*:*:*:*:*:*:* Versions 4.0.a8 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.0.a9:*:*:*:*:*:*:* Versions 4.0.a9 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.0.b1:*:*:*:*:*:*:* Versions 4.0.b1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.0.b2:*:*:*:*:*:*:* Versions 4.0.b2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.0.b3:*:*:*:*:*:*:* Versions 4.0.b3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.2b.1:*:*:*:*:*:*:* Versions 4.2b.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:4.2b.3:*:*:*:*:*:*:* Versions 4.2b.3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.0a:*:*:*:*:*:*:* Versions 5.0a Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.0a.1:*:*:*:*:*:*:* Versions 5.0a.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.0b:*:*:*:*:*:*:* Versions 5.0b Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.0b.1:*:*:*:*:*:*:* Versions 5.0b.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.1.2:*:*:*:*:*:*:* Versions 5.1.2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.2:*:*:*:*:*:*:* Versions 5.2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.2b:*:*:*:*:*:*:* Versions 5.2b Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.2b2:*:*:*:*:*:*:* Versions 5.2b2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.3:*:*:*:*:*:*:* Versions 5.3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.3.2:*:*:*:*:*:*:* Versions 5.3.2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.3a.8:*:*:*:*:*:*:* Versions 5.3a.8 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.3a.9:*:*:*:*:*:*:* Versions 5.3a.9 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.3a.10:*:*:*:*:*:*:* Versions 5.3a.10 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.3b.1:*:*:*:*:*:*:* Versions 5.3b.1 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.3b.3:*:*:*:*:*:*:* Versions 5.3b.3 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.3b.4:*:*:*:*:*:*:* Versions 5.3b.4 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.3b.5:*:*:*:*:*:*:* Versions 5.3b.5 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.4a.2:*:*:*:*:*:*:* Versions 5.4a.2 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.4a.4:*:*:*:*:*:*:* Versions 5.4a.4 Vulnerable ·Sympa
- cpe:2.3:a:sympa:sympa:5.4b.1:*:*:*:*:*:*:* Versions 5.4b.1 Vulnerable ·Sympa
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2008-1648
- 2026-10-03 Alias added: GHSA-2fgj-xr9x-3qq6
References
More Sympa vulnerabilities
- TI-2018-15946 The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal… CVSS 3.0CRITICAL 9.8
- TI-2012-02081 The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before… CVSS 2.0HIGH 7.5
- TI-2020-07491 Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk… CVSS 3.1HIGH 7.5
- TI-2020-08817 Sympa before 6.2.56 allows privilege escalation. CVSS 3.1HIGH 7.8
- TI-2020-16310 Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account… CVSS 3.1HIGH 7.8
- TI-2021-21568 Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but… CVSS 3.1HIGH 7.5
Sources
- CVE-2008-1648 · CVE Program
- CVE-2008-1648 · NVD
- FIRST EPSS
- GHSA-2fgj-xr9x-3qq6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences