sympa vulnerabilities (Debian)
15 vulnerabilities.
-
sympaDebian Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not... 7.5 High -
sympaDebian Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any... 3.7 Low -
sympaDebian Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full... 7.8 High -
sympaDebian debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode 4755 for... 4.3 Medium -
sympaDebian Sympa before 6.2.56 allows privilege escalation. 7.8 High -
sympaDebian Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk... 7.5 High -
sympaDebian sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open... 6.1 Medium -
sympaDebian The Sympa Community Sympa version prior to version 6.2.32 contains a Directory Traversal... 9.8 Critical -
sympaDebian The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6... 5.0 Medium -
sympaDebian The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does... 7.5 High -
sympaDebian sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on... 6.9 Medium -
sympaDebian Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e... 5.0 Medium -
sympaDebian Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local... 4.6 Medium -
sympaDebian Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier... 4.3 Medium -
sympaDebian sympa - security update No score