CVE-2015-1306
Publication date 22 January 2015
Last updated 24 July 2024
Ubuntu priority
The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via unspecified vectors.
Status
Package | Ubuntu Release | Status |
---|---|---|
sympa | ||
18.04 LTS bionic |
Not affected
|
|
16.04 LTS xenial |
Not affected
|
|
14.04 LTS trusty | Not in release | |
References
Other references
- https://www.sympa.org/security_advisories#security_breaches_in_newsletter_posting
- https://www.sympa.org/security_advisories
- http://www.openwall.com/lists/oss-security/2015/01/20/4
- http://www.debian.org/security/2015/dsa-3134
- http://secunia.com/advisories/62442
- http://secunia.com/advisories/62387
- https://www.cve.org/CVERecord?id=CVE-2015-1306