CVE-2015-1306

Description

The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors.

References

https://www.sympa.org/security_advisories

http://www.securityfocus.com/bid/72277

http://www.openwall.com/lists/oss-security/2015/01/20/4

http://www.mandriva.com/security/advisories?name=MDVSA-2015:051

http://www.debian.org/security/2015/dsa-3134

http://secunia.com/advisories/62442

http://secunia.com/advisories/62387

http://advisories.mageia.org/MGASA-2015-0085.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3