Oval Definition:oval:org.mitre.oval:def:11742
Revision Date:2014-06-23Version:20
Title:DSA-2073 mlmmj -- insufficient input sanitising
Description:Florian Streibelt reported a directory traversal flaw in the way the Mailing List Managing Made Joyful mailing list manager processed users" requests originating from the administrator web interface without enough input validation. A remote, authenticated attacker could use these flaws to write and/or delete arbitrary files.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-4896
DSA-2073
Platform(s):Debian GNU/Linux 5.0
Product(s):mlmmj
Definition Synopsis
  • Debian GNU/Linux 5.0 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND Packages section
  • mlmmj-php-web is earlier than 1.2.15-1.1+lenny1
  • OR mlmmj-php-web-admin is earlier than 1.2.15-1.1+lenny1
  • OR Architecture dependent section
  • Supported architectures section
  • Installed architecture is s390
  • OR Installed architecture is amd64
  • OR Installed architecture is sparc
  • OR Installed architecture is arm
  • OR Installed architecture is i386
  • OR Installed architecture is armel
  • OR Installed architecture is mips
  • OR Installed architecture is ia64
  • OR Installed architecture is alpha
  • OR Installed architecture is powerpc
  • OR Installed architecture is mipsel
  • OR Installed architecture is hppa
  • AND mlmmj is earlier than 1.2.15-1.1+lenny1
  • BACK