CVE-2005-0202

Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences.

• How can I get the fixes?
• What do statuses mean?

References

• MITRE
• NVD
• Launchpad
• Debian

Related Ubuntu Security Notices (USN)

• USN-78-2
• Fixed mailman packages for USN-78-1
• 17 February 2005
• USN-78-1
• Mailman vulnerability
• 10 February 2005

Other references

• https://www.cve.org/CVERecord?id=CVE-2005-0202