5

CVE-2005-0202

Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Mailman Version2.1
Gnu ≫ Mailman Version2.1.1
Gnu ≫ Mailman Version2.1.2
Gnu ≫ Mailman Version2.1.3
Gnu ≫ Mailman Version2.1.4
Gnu ≫ Mailman Version2.1.5
Gnu ≫ Mailman Version2.1b1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.73% 0.846
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N