Security Advisory

CVE-2002-0417

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2002-06-11 04:00:00
Last updated 2024-08-08 02:49:28
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs.