The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the (1) do_arc_manage, (2) do_arc_download, or (3) do_arc_delete functions.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sympa | Sympa | * | 6.1.10 (including) |
| Sympa | Sympa | 0.001 (including) | 0.001 (including) |
| Sympa | Sympa | 0.002 (including) | 0.002 (including) |
| Sympa | Sympa | 0.003 (including) | 0.003 (including) |
| Sympa | Sympa | 0.004 (including) | 0.004 (including) |
| Sympa | Sympa | 0.005 (including) | 0.005 (including) |
| Sympa | Sympa | 0.006 (including) | 0.006 (including) |
| Sympa | Sympa | 0.007 (including) | 0.007 (including) |
| Sympa | Sympa | 0.008 (including) | 0.008 (including) |
| Sympa | Sympa | 0.009 (including) | 0.009 (including) |
| Sympa | Sympa | 0.010 (including) | 0.010 (including) |
| Sympa | Sympa | 0.011 (including) | 0.011 (including) |
| Sympa | Sympa | 1.2.0 (including) | 1.2.0 (including) |
| Sympa | Sympa | 1.2.1 (including) | 1.2.1 (including) |
| Sympa | Sympa | 1.2.2 (including) | 1.2.2 (including) |
| Sympa | Sympa | 1.3.0 (including) | 1.3.0 (including) |
| Sympa | Sympa | 1.3.1 (including) | 1.3.1 (including) |
| Sympa | Sympa | 1.3.1-2 (including) | 1.3.1-2 (including) |
| Sympa | Sympa | 1.3.2 (including) | 1.3.2 (including) |
| Sympa | Sympa | 1.3.3 (including) | 1.3.3 (including) |
| Sympa | Sympa | 1.3.4 (including) | 1.3.4 (including) |
| Sympa | Sympa | 1.3.4-1 (including) | 1.3.4-1 (including) |
| Sympa | Sympa | 1.4.0 (including) | 1.4.0 (including) |
| Sympa | Sympa | 1.4.1 (including) | 1.4.1 (including) |
| Sympa | Sympa | 1.4.2 (including) | 1.4.2 (including) |
| Sympa | Sympa | 1.4.2-1 (including) | 1.4.2-1 (including) |
| Sympa | Sympa | 1.5 (including) | 1.5 (including) |
| Sympa | Sympa | 2.2.1b (including) | 2.2.1b (including) |
| Sympa | Sympa | 2.2.2b (including) | 2.2.2b (including) |
| Sympa | Sympa | 2.2.3b (including) | 2.2.3b (including) |
| Sympa | Sympa | 2.2.4 (including) | 2.2.4 (including) |
| Sympa | Sympa | 2.2.5 (including) | 2.2.5 (including) |
| Sympa | Sympa | 2.2.6 (including) | 2.2.6 (including) |
| Sympa | Sympa | 2.2.7 (including) | 2.2.7 (including) |
| Sympa | Sympa | 2.2b (including) | 2.2b (including) |
| Sympa | Sympa | 2.3-beta (including) | 2.3-beta (including) |
| Sympa | Sympa | 2.3.0 (including) | 2.3.0 (including) |
| Sympa | Sympa | 2.3.1 (including) | 2.3.1 (including) |
| Sympa | Sympa | 2.3.2 (including) | 2.3.2 (including) |
| Sympa | Sympa | 2.3.3 (including) | 2.3.3 (including) |
| Sympa | Sympa | 2.3.4 (including) | 2.3.4 (including) |
| Sympa | Sympa | 2.4 (including) | 2.4 (including) |
| Sympa | Sympa | 2.5 (including) | 2.5 (including) |
| Sympa | Sympa | 2.5.1 (including) | 2.5.1 (including) |
| Sympa | Sympa | 2.5.2 (including) | 2.5.2 (including) |
| Sympa | Sympa | 2.5.3b (including) | 2.5.3b (including) |
| Sympa | Sympa | 2.5.4b (including) | 2.5.4b (including) |
| Sympa | Sympa | 2.6 (including) | 2.6 (including) |
| Sympa | Sympa | 2.6.1 (including) | 2.6.1 (including) |
| Sympa | Sympa | 2.7 (including) | 2.7 (including) |
| Sympa | Sympa | 2.7.1 (including) | 2.7.1 (including) |
| Sympa | Sympa | 2.7.2 (including) | 2.7.2 (including) |
| Sympa | Sympa | 2.7.3 (including) | 2.7.3 (including) |
| Sympa | Sympa | 2.7a (including) | 2.7a (including) |
| Sympa | Sympa | 2.7b.1 (including) | 2.7b.1 (including) |
| Sympa | Sympa | 2.7b.2 (including) | 2.7b.2 (including) |
| Sympa | Sympa | 2.7b.3 (including) | 2.7b.3 (including) |
| Sympa | Sympa | 3.0 (including) | 3.0 (including) |
| Sympa | Sympa | 3.0a (including) | 3.0a (including) |
| Sympa | Sympa | 3.0a.1 (including) | 3.0a.1 (including) |
| Sympa | Sympa | 3.0b.4 (including) | 3.0b.4 (including) |
| Sympa | Sympa | 3.0b.8 (including) | 3.0b.8 (including) |
| Sympa | Sympa | 3.0b.9 (including) | 3.0b.9 (including) |
| Sympa | Sympa | 3.1 (including) | 3.1 (including) |
| Sympa | Sympa | 3.1.1 (including) | 3.1.1 (including) |
| Sympa | Sympa | 3.1b.7 (including) | 3.1b.7 (including) |
| Sympa | Sympa | 3.1b.8 (including) | 3.1b.8 (including) |
| Sympa | Sympa | 3.1b.9 (including) | 3.1b.9 (including) |
| Sympa | Sympa | 3.1b.10 (including) | 3.1b.10 (including) |
| Sympa | Sympa | 3.1b.12 (including) | 3.1b.12 (including) |
| Sympa | Sympa | 3.1b.13 (including) | 3.1b.13 (including) |
| Sympa | Sympa | 3.2 (including) | 3.2 (including) |
| Sympa | Sympa | 3.2.1 (including) | 3.2.1 (including) |
| Sympa | Sympa | 3.2.2a (including) | 3.2.2a (including) |
| Sympa | Sympa | 3.3 (including) | 3.3 (including) |
| Sympa | Sympa | 3.3.1 (including) | 3.3.1 (including) |
| Sympa | Sympa | 3.3.3 (including) | 3.3.3 (including) |
| Sympa | Sympa | 3.3.4b.3 (including) | 3.3.4b.3 (including) |
| Sympa | Sympa | 3.3.4b.4 (including) | 3.3.4b.4 (including) |
| Sympa | Sympa | 3.3.4b.5 (including) | 3.3.4b.5 (including) |
| Sympa | Sympa | 3.3.4b.6 (including) | 3.3.4b.6 (including) |
| Sympa | Sympa | 3.3.4b.7 (including) | 3.3.4b.7 (including) |
| Sympa | Sympa | 3.3.4b.8 (including) | 3.3.4b.8 (including) |
| Sympa | Sympa | 3.3.4b.9 (including) | 3.3.4b.9 (including) |
| Sympa | Sympa | 3.3.5 (including) | 3.3.5 (including) |
| Sympa | Sympa | 3.3.6b.1 (including) | 3.3.6b.1 (including) |
| Sympa | Sympa | 3.3.6b.2 (including) | 3.3.6b.2 (including) |
| Sympa | Sympa | 3.3.6b.3 (including) | 3.3.6b.3 (including) |
| Sympa | Sympa | 3.3.6b.4 (including) | 3.3.6b.4 (including) |
| Sympa | Sympa | 3.3.6b.5 (including) | 3.3.6b.5 (including) |
| Sympa | Sympa | 3.3.6b.6 (including) | 3.3.6b.6 (including) |
| Sympa | Sympa | 3.3b.3 (including) | 3.3b.3 (including) |
| Sympa | Sympa | 3.3b.4 (including) | 3.3b.4 (including) |
| Sympa | Sympa | 3.4 (including) | 3.4 (including) |
| Sympa | Sympa | 4.0.a1 (including) | 4.0.a1 (including) |
| Sympa | Sympa | 4.0.a3 (including) | 4.0.a3 (including) |
| Sympa | Sympa | 4.0.a4 (including) | 4.0.a4 (including) |
| Sympa | Sympa | 4.0.a5 (including) | 4.0.a5 (including) |
| Sympa | Sympa | 4.0.a6 (including) | 4.0.a6 (including) |
| Sympa | Sympa | 4.0.a7 (including) | 4.0.a7 (including) |
| Sympa | Sympa | 4.0.a8 (including) | 4.0.a8 (including) |
| Sympa | Sympa | 4.0.a9 (including) | 4.0.a9 (including) |
| Sympa | Sympa | 4.0.b1 (including) | 4.0.b1 (including) |
| Sympa | Sympa | 4.0.b2 (including) | 4.0.b2 (including) |
| Sympa | Sympa | 4.0.b3 (including) | 4.0.b3 (including) |
| Sympa | Sympa | 4.1 (including) | 4.1 (including) |
| Sympa | Sympa | 4.2b.1 (including) | 4.2b.1 (including) |
| Sympa | Sympa | 4.2b.3 (including) | 4.2b.3 (including) |
| Sympa | Sympa | 5.0 (including) | 5.0 (including) |
| Sympa | Sympa | 5.0a (including) | 5.0a (including) |
| Sympa | Sympa | 5.0a.1 (including) | 5.0a.1 (including) |
| Sympa | Sympa | 5.0b (including) | 5.0b (including) |
| Sympa | Sympa | 5.0b.1 (including) | 5.0b.1 (including) |
| Sympa | Sympa | 5.1 (including) | 5.1 (including) |
| Sympa | Sympa | 5.1.2 (including) | 5.1.2 (including) |
| Sympa | Sympa | 5.2 (including) | 5.2 (including) |
| Sympa | Sympa | 5.2b (including) | 5.2b (including) |
| Sympa | Sympa | 5.2b2 (including) | 5.2b2 (including) |
| Sympa | Sympa | 5.3 (including) | 5.3 (including) |
| Sympa | Sympa | 5.3.2 (including) | 5.3.2 (including) |
| Sympa | Sympa | 5.3a.8 (including) | 5.3a.8 (including) |
| Sympa | Sympa | 5.3a.9 (including) | 5.3a.9 (including) |
| Sympa | Sympa | 5.3a.10 (including) | 5.3a.10 (including) |
| Sympa | Sympa | 5.3b.1 (including) | 5.3b.1 (including) |
| Sympa | Sympa | 5.3b.3 (including) | 5.3b.3 (including) |
| Sympa | Sympa | 5.3b.4 (including) | 5.3b.4 (including) |
| Sympa | Sympa | 5.3b.5 (including) | 5.3b.5 (including) |
| Sympa | Sympa | 5.4 (including) | 5.4 (including) |
| Sympa | Sympa | 5.4.1 (including) | 5.4.1 (including) |
| Sympa | Sympa | 5.4.2 (including) | 5.4.2 (including) |
| Sympa | Sympa | 5.4.3 (including) | 5.4.3 (including) |
| Sympa | Sympa | 5.4a.2 (including) | 5.4a.2 (including) |
| Sympa | Sympa | 5.4a.4 (including) | 5.4a.4 (including) |
| Sympa | Sympa | 5.4b.1 (including) | 5.4b.1 (including) |
| Sympa | Sympa | 6.0 (including) | 6.0 (including) |
| Sympa | Sympa | 6.0.1 (including) | 6.0.1 (including) |
| Sympa | Sympa | 6.0.2 (including) | 6.0.2 (including) |
| Sympa | Sympa | 6.0.3 (including) | 6.0.3 (including) |
| Sympa | Sympa | 6.0.4 (including) | 6.0.4 (including) |
| Sympa | Sympa | 6.0.5 (including) | 6.0.5 (including) |
| Sympa | Sympa | 6.0.6 (including) | 6.0.6 (including) |
| Sympa | Sympa | 6.0b.1 (including) | 6.0b.1 (including) |
| Sympa | Sympa | 6.0b.2 (including) | 6.0b.2 (including) |
| Sympa | Sympa | 6.0b.3 (including) | 6.0b.3 (including) |
| Sympa | Sympa | 6.0b.4 (including) | 6.0b.4 (including) |
| Sympa | Sympa | 6.1.1 (including) | 6.1.1 (including) |
| Sympa | Sympa | 6.1.2 (including) | 6.1.2 (including) |
| Sympa | Sympa | 6.1.3 (including) | 6.1.3 (including) |
| Sympa | Sympa | 6.1.4 (including) | 6.1.4 (including) |
| Sympa | Sympa | 6.1.5 (including) | 6.1.5 (including) |
| Sympa | Sympa | 6.1.6 (including) | 6.1.6 (including) |
| Sympa | Sympa | 6.1.7 (including) | 6.1.7 (including) |
| Sympa | Sympa | 6.1.8 (including) | 6.1.8 (including) |
| Sympa | Sympa | 6.1.9 (including) | 6.1.9 (including) |
| Sympa | Sympa | 6.1b.1 (including) | 6.1b.1 (including) |
| Sympa | Sympa | 6.1b.2 (including) | 6.1b.2 (including) |
| Sympa | Sympa | 6.1b.3 (including) | 6.1b.3 (including) |
| Sympa | Sympa | 6.1b.4 (including) | 6.1b.4 (including) |
| Sympa | Sympa | 6.1b.6 (including) | 6.1b.6 (including) |
| Sympa | Ubuntu | hardy | * |
| Sympa | Ubuntu | lucid | * |
| Sympa | Ubuntu | natty | * |
| Sympa | Ubuntu | oneiric | * |
| Sympa | Ubuntu | precise | * |
| Sympa | Ubuntu | quantal | * |
| Sympa | Ubuntu | raring | * |
| Sympa | Ubuntu | saucy | * |
| Sympa | Ubuntu | upstream | * |
References
- http://secunia.com/advisories/49045
- http://secunia.com/advisories/49237
- http://www.debian.org/security/2012/dsa-2477
- http://www.openwall.com/lists/oss-security/2012/05/11/8
- http://www.openwall.com/lists/oss-security/2012/05/12/2
- http://www.openwall.com/lists/oss-security/2012/05/12/8
- http://www.osvdb.org/81890
- http://www.securityfocus.com/bid/53503
- https://sourcesup.renater.fr/scm/viewvc.php/branches/sympa-6.0-branch/wwsympa/wwsympa.fcgi.in?root=sympa\u0026r1=6706\u0026r2=7358\u0026pathrev=7358
- https://www.sympa.org/distribution/latest-stable/NEWS
- http://secunia.com/advisories/49045
- http://secunia.com/advisories/49237
- http://www.debian.org/security/2012/dsa-2477
- http://www.openwall.com/lists/oss-security/2012/05/11/8
- http://www.openwall.com/lists/oss-security/2012/05/12/2
- http://www.openwall.com/lists/oss-security/2012/05/12/8
- http://www.osvdb.org/81890
- http://www.securityfocus.com/bid/53503
- https://sourcesup.renater.fr/scm/viewvc.php/branches/sympa-6.0-branch/wwsympa/wwsympa.fcgi.in?root=sympa\u0026r1=6706\u0026r2=7358\u0026pathrev=7358
- https://www.sympa.org/distribution/latest-stable/NEWS