CVE-2011-0063 - CVE House
Back to Database
Status published Medium CVE-2011-0063

The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and...

Vulnerability Description

The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./.../ sequence in the "extra" parameter to the help command, which causes the regular expression to produce .. (dot dot) sequences. NOTE: this vulnerability is due to an incomplete fix for CVE-2011-0049.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-0063

Credits & Attribution

No credits recorded in the NVD database.

References

More from mj2

View All →
CVE-2011-0049
Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in...
Medium 5

Affected Vendor

Affected Software

majordomo 2
Vulnerable Versions:
0, 20110101, 20110102, 20110103, 20110104, 20110105, 20110106, 20110107, 20110108, 20110109, 20110110, 20110111, 20110112, 20110113, 20110114, 20110115, 20110116, 20110117, 20110118, 20110119, 20110120, 20110121, 20110122, 20110123, 20110124, 20110125, 20110126, 20110127, 20110128, 20110129, 20110130, 20110131, 20110201, 20110202

Timeline

Official Publish: March 15th, 2011
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.