CVE-2015-2775
Fixed in a distro release EPSS 8%
Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. (dot dot) in a list name.
Products: canonical ubuntu_linux, debian_linux, redhat enterprise_linux, gnu mailman
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | mailman | 1:2.1.13-6 |
| Debian 7 | mailman | 1:2.1.15-1+deb7u1 |
| Red Hat Enterprise Linux 6 | mailman | 3:2.1.12-25.el6 |
| Red Hat Enterprise Linux 6 | mailman-debuginfo | 3:2.1.12-25.el6 |
| Red Hat Enterprise Linux 7 | mailman | 3:2.1.15-21.ael7b_1 |
| Red Hat Enterprise Linux 7 | mailman | 3:2.1.15-21.el7_1 |
| Red Hat Enterprise Linux 7 | mailman-debuginfo | 3:2.1.15-21.ael7b_1 |
| Red Hat Enterprise Linux 7 | mailman-debuginfo | 3:2.1.15-21.el7_1 |
| SUSE Enterprise Storage 4 | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | mailman | 2.1.15-9.6.6.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | mailman | 2.1.15-9.6.6.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mailman | 2.1.15-9.6.6.1 |
| SUSE Linux Enterprise Server 11 SP4 | mailman | 2.1.15-9.6.6.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server 12 SP2-BCL | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server 12 SP3 | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server 12 SP4 | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server 12-LTSS | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mailman | 2.1.15-9.6.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | mailman | 2.1.17-3.3.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | mailman | 2.1.17-3.3.3 |
| SUSE OpenStack Cloud 7 | mailman | 2.1.17-3.3.3 |
| Ubuntu 14.04 LTS | mailman | 1:2.1.16-2ubuntu0.1 |
| openSUSE Tumbleweed | mailman | 2.1.23-1.2 |