NVD

Id
44164  
Name
CVE-2012-2352  
Description
The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the (1) do_arc_manage, (2) do_arc_download, or (3) do_arc_delete functions.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-05-31  
Modified Date
2012-08-13  
Seq
2012-2352  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221828 44164 CVE-2012-2352 DSA-2477  View
221829 44164 CVE-2012-2352 [oss-security] 20120511 CVE request: sympa (try again)  View
221830 44164 CVE-2012-2352 [oss-security] 20120511 Re: CVE request: sympa (try again)  View
221831 44164 CVE-2012-2352 [oss-security] 20120512 Re: CVE request: sympa (try again)  View
221832 44164 CVE-2012-2352 53503  View
221833 44164 CVE-2012-2352 https://sourcesup.renater.fr/scm/viewvc.php/branches/sympa-6.0-branch/wwsympa/wwsympa.fcgi.in?root=sympa&r1=6706&r2=7358&pathrev=7358  View
221834 44164 CVE-2012-2352 https://www.sympa.org/distribution/latest-stable/NEWS  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26879 JVNDB-2012-002586 Sympa の投稿保管庫管理ページにおける任意の投稿保管庫を操作される脆弱性 Sympa の wwsympa/wwsympa.fcgi.in 内の投稿保管庫管理ページは、アクセス許可を確認しないため、任意のリスト投稿保管庫をリスト化される、読まれる、および削除される脆弱性が存在します。 CVE-2012-2352 55590 CVE-2012-2352 44164 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002586.html 2012-05-31 2012-06-04 View