14 results · Feed
-
High 7.5
Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this paramet…
-
Unscored —
Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except o…
-
Unscored —
debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for sympa_newaliases-wrapper, wh…
-
Unscored —
Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full root access by modifyin…
-
Unscored —
-
Unscored —
Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files…
-
Unscored —
sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in…
-
Unscored —
The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal vulnerability in wwsympa.fcgi …
-
Unscored —
The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote att…
-
Unscored —
The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, …
-
Unscored —
sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympa_aliases.…
-
Unscored —
Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malfo…
-
Unscored —CVE-2004-1735 Public exploit
Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticat…
-
Unscored —
Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbi…