Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful (mlmmj) 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. (dot dot) in a list name in a (1) edit or (2) save action.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://mlmmj.org/node/84 | x_refsource_CONFIRM |
| http://www.openwall.com/lists/oss-security/2010/06/26/1 | mailing-list x_refsource_MLIST |
| http://bugs.gentoo.org/show_bug.cgi?id=259968 | x_refsource_CONFIRM |
| http://www.openwall.com/lists/oss-security/2010/06/25/2 | mailing-list x_refsource_MLIST |
| http://secunia.com/advisories/40658 | third-party-advisory x_refsource_SECUNIA |
| http://www.openwall.com/lists/oss-security/2010/06/23/5 | mailing-list x_refsource_MLIST |
| https://bugzilla.redhat.com/show_bug.cgi?id=607256 | x_refsource_CONFIRM |
| http://www.openwall.com/lists/oss-security/2010/07/06/1 | mailing-list x_refsource_MLIST |
| http://www.openwall.com/lists/oss-security/2010/06/23/6 | mailing-list x_refsource_MLIST |
| http://www.openwall.com/lists/oss-security/2010/07/04/4 | mailing-list x_refsource_MLIST |
| http://www.debian.org/security/2010/dsa-2073 | vendor-advisory x_refsource_DEBIAN |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://mlmmj.org/node/84 | x_refsource_CONFIRM x_transferred |
| http://www.openwall.com/lists/oss-security/2010/06/26/1 | mailing-list x_refsource_MLIST x_transferred |
| http://bugs.gentoo.org/show_bug.cgi?id=259968 | x_refsource_CONFIRM x_transferred |
| http://www.openwall.com/lists/oss-security/2010/06/25/2 | mailing-list x_refsource_MLIST x_transferred |
| http://secunia.com/advisories/40658 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.openwall.com/lists/oss-security/2010/06/23/5 | mailing-list x_refsource_MLIST x_transferred |
| https://bugzilla.redhat.com/show_bug.cgi?id=607256 | x_refsource_CONFIRM x_transferred |
| http://www.openwall.com/lists/oss-security/2010/07/06/1 | mailing-list x_refsource_MLIST x_transferred |
| http://www.openwall.com/lists/oss-security/2010/06/23/6 | mailing-list x_refsource_MLIST x_transferred |
| http://www.openwall.com/lists/oss-security/2010/07/04/4 | mailing-list x_refsource_MLIST x_transferred |
| http://www.debian.org/security/2010/dsa-2073 | vendor-advisory x_refsource_DEBIAN x_transferred |