FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

mail/sympa* -- Multiple vulnerabilities in Sympa archive management

Affected packages
		sympa	<	6.0.7
6.1.*	<	sympa	<	6.1.11

Details

VuXML ID	de6d8290-aef7-11e1-898f-14dae938ec40
Discovery	2012-05-15
Entry	2012-06-05

David Verdin reports:

Multiple vulnerabilities have been discovered in Sympa archive management that allow to skip the scenario-based authorization mechanisms.

This vulnerability allows the attacker to:

display the archives management page ('arc_manage')

download the list's archives

delete the list's archives

[source]

References

URL	http://www.sympa.org/security_advisories#security_breaches_in_archives_management