From 351c3252f17296188d1b6f6f5ce1d4d861819e1e Mon Sep 17 00:00:00 2001 From: Kurt Jaeger Date: Wed, 27 May 2020 16:20:11 +0000 Subject: security/vuxml: add two entries for mail/sympa PR: 246701 Submitted by: Geoffroy Desvernay --- security/vuxml/vuln.xml | 66 +++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 66 insertions(+) (limited to 'security') diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 3e0111d60a70..d12a7139e0a2 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,72 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> + + sympa -- Denial of service caused by malformed CSRF token + + + sympa + 6.2.54 + + + + +

Javier Moreno discovered a vulnerability in Sympa web + interface that can cause denial of service (DoS) attack.

+

By submitting requests with malformed parameters, this + flaw allows to create junk files in Sympa's directory + for temporary files. And particularly by tampering token + to prevent CSRF, it allows to originate exessive + notification messages to listmasters.

+ + + + CVE-2020-9369 + https://sympa-community.github.io/security/2020-001.html + + + 2020-02-24 + 2020-05-22 + + + + + sympa - Security flaws in setuid wrappers + + + sympa + 6.2.56 + + + + +

A vulnerability has been discovered in Sympa web interface + by which attacker can execute arbitrary code with root privileges. + Sympa uses two sorts of setuid wrappers:

+
    +
  • FastCGI wrappers
    • +
  • newaliases wrapper
    • +
+

The FastCGI wrappers wwsympa-wrapper.fcgi and + sympa_soap_server-wrapper.fcgi were used to make the web + interface running under privileges of a dedicated user.

+

The newaliases wrapper (sympa_newaliases-wrapper) allows + Sympa to update the alias database with root privileges.

+

Since these setuid wrappers did not clear environment variables, + if environment variables like PERL5LIB were injected, + forged code might be loaded and executed under privileges of setuid-ed + users.

+ + + + https://sympa-community.github.io/security/2020-002.html + + + 2020-05-24 + 2020-05-26 + + + powerdns-recursor -- multiple vulnerabilities -- cgit v1.2.3