CVE-2005-0202

Published: 2 May 2005

Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences.

Status

References

• https://ubuntu.com/security/notices/USN-78-2
• https://ubuntu.com/security/notices/USN-78-1
• https://www.cve.org/CVERecord?id=CVE-2005-0202
• NVD
• Launchpad
• Debian