CVE-2009-4896 | BDVDB-2026-42766 Detail
Description#
Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful (mlmmj) 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. (dot dot) in a list name in a (1) edit or (2) save action.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://mlmmj.org/node/84
- http://www.openwall.com/lists/oss-security/2010/06/26/1
- http://bugs.gentoo.org/show_bug.cgi?id=259968
- http://www.openwall.com/lists/oss-security/2010/06/25/2
- http://secunia.com/advisories/40658
- http://www.openwall.com/lists/oss-security/2010/06/23/5
- https://bugzilla.redhat.com/show_bug.cgi?id=607256
- http://www.openwall.com/lists/oss-security/2010/07/06/1
- http://www.openwall.com/lists/oss-security/2010/06/23/6
- http://www.openwall.com/lists/oss-security/2010/07/04/4
- http://www.debian.org/security/2010/dsa-2073
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.