Summary
It was discovered that Mailman incorrectly handled special characters
in list names. A local attacker could use this issue to perform a path
traversal attack and execute arbitrary code as the Mailman user.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | mailman | 1:2.1.16-2ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers …
References
-
report
https://ubuntu.com/security/CVE-2015-2775