suse · CVE-2015-2775

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2015-2775 severity moderate: SUSE including 6 source package names (mailman, mailman-2.1.15-21.el7_1, mailman-2.1.15-9.6.6.1, mailman-2.1.17-3.3.3, mailman-2.1.17-3.8.1, mailman-2.1.23-1.2), 26 product×package rows across 26 product lines (SUSE Enterprise Storage 4, SUSE Liberty Linux 7, … (26 product lines)): Fixed 25, Known Not Affected 1.

Description:

Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. (dot dot) in a list name.