CVE-2005-0202
Fixed in a distro release EPSS 3%
Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences.
Products: gnu mailman
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | mailman | 2.0.11-1woody11 |
| Red Hat Enterprise Linux 3 | mailman | 3:2.1.5-24.rhel3 |
| Red Hat Enterprise Linux 3 | mailman-debuginfo | 3:2.1.5-24.rhel3 |
| Red Hat Enterprise Linux 4 | mailman | 3:2.1.5-31.rhel4 |
| Red Hat Enterprise Linux 4 | mailman-debuginfo | 3:2.1.5-31.rhel4 |