PT-2017-5801 · Renaud Dubois Christophe Wolfhugel Others As Part Of The Sympa Community · Sympa

Published 2015-02-26 · Updated 2015-02-26 · CVE-2014-1306

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Sympa (affected versions not specified)

Description A security issue has been found in the Sympa web interface, allowing access to files on the server filesystem. This issue enables sending any file readable by the Sympa user, located on the server filesystem, using the Sympa web interface newsletter posting area.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2014-1306

MGASA-2015-0085

Affected Products

Sympa

References · 5

• https://osv.dev/vulnerability/MGASA-2015-0085 · Vendor Advisory
• https://debian.org/security/2015/dsa-3134 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0085.html · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=15097 · Note
• https://sympa.org/security_advisories#security_breaches_in_newsletter_posting · Note