CVE-2012-2352
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2012-2352
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2012-2352.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2012-2352
- Downstream
- Published
- 2012-05-31T17:55:04Z
- Modified
- 2025-04-11T00:51:21Z
- Summary
- [none]
- Details
-
The archive management (arcmanage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the (1) doarcmanage, (2) doarcdownload, or (3) doarc_delete functions.
- References
-
- http://secunia.com/advisories/49045
- http://secunia.com/advisories/49237
- http://www.debian.org/security/2012/dsa-2477
- http://www.openwall.com/lists/oss-security/2012/05/11/8
- http://www.openwall.com/lists/oss-security/2012/05/12/2
- http://www.openwall.com/lists/oss-security/2012/05/12/8
- http://www.osvdb.org/81890
- http://www.securityfocus.com/bid/53503
- https://sourcesup.renater.fr/scm/viewvc.php/branches/sympa-6.0-branch/wwsympa/wwsympa.fcgi.in?root=sympa&r1=6706&r2=7358&pathrev=7358
- https://www.sympa.org/distribution/latest-stable/NEWS
- https://security-tracker.debian.org/tracker/CVE-2012-2352
Affected packages
Debian:11 / sympa
Package
- Name
- sympa
- Purl
- pkg:deb/debian/sympa?arch=source
Debian:12 / sympa
Package
- Name
- sympa
- Purl
- pkg:deb/debian/sympa?arch=source
Debian:13 / sympa
Package
- Name
- sympa
- Purl
- pkg:deb/debian/sympa?arch=source