Unknown
CVE-2012-2352
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
Unknown
(0 users assessed)Unknown
(0 users assessed)Unknown
Unknown
Unknown
MITRE ATT&CK
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Topic Tags
Description
The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the (1) do_arc_manage, (2) do_arc_download, or (3) do_arc_delete functions.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
General Information
Vendors
Products
- sympa,
- sympa 0.001,
- sympa 0.002,
- sympa 0.003,
- sympa 0.004,
- sympa 0.005,
- sympa 0.006,
- sympa 0.007,
- sympa 0.008,
- sympa 0.009,
- sympa 0.010,
- sympa 0.011,
- sympa 1.2.0,
- sympa 1.2.1,
- sympa 1.2.2,
- sympa 1.3.0,
- sympa 1.3.1,
- sympa 1.3.1-2,
- sympa 1.3.2,
- sympa 1.3.3,
- sympa 1.3.4,
- sympa 1.3.4-1,
- sympa 1.4.0,
- sympa 1.4.1,
- sympa 1.4.2,
- sympa 1.4.2-1,
- sympa 1.5,
- sympa 2.2.1b,
- sympa 2.2.2b,
- sympa 2.2.3b,
- sympa 2.2.4,
- sympa 2.2.5,
- sympa 2.2.6,
- sympa 2.2.7,
- sympa 2.2b,
- sympa 2.3,
- sympa 2.3.0,
- sympa 2.3.1,
- sympa 2.3.2,
- sympa 2.3.3,
- sympa 2.3.4,
- sympa 2.4,
- sympa 2.5,
- sympa 2.5.1,
- sympa 2.5.2,
- sympa 2.5.3b,
- sympa 2.5.4b,
- sympa 2.6,
- sympa 2.6.1,
- sympa 2.7,
- sympa 2.7.1,
- sympa 2.7.2,
- sympa 2.7.3,
- sympa 2.7a,
- sympa 2.7b.1,
- sympa 2.7b.2,
- sympa 2.7b.3,
- sympa 3.0,
- sympa 3.0a,
- sympa 3.0a.1,
- sympa 3.0b.4,
- sympa 3.0b.8,
- sympa 3.0b.9,
- sympa 3.1,
- sympa 3.1.1,
- sympa 3.1b.10,
- sympa 3.1b.12,
- sympa 3.1b.13,
- sympa 3.1b.7,
- sympa 3.1b.8,
- sympa 3.1b.9,
- sympa 3.2,
- sympa 3.2.1,
- sympa 3.2.2a,
- sympa 3.3,
- sympa 3.3.1,
- sympa 3.3.3,
- sympa 3.3.4b.3,
- sympa 3.3.4b.4,
- sympa 3.3.4b.5,
- sympa 3.3.4b.6,
- sympa 3.3.4b.7,
- sympa 3.3.4b.8,
- sympa 3.3.4b.9,
- sympa 3.3.5,
- sympa 3.3.6b.1,
- sympa 3.3.6b.2,
- sympa 3.3.6b.3,
- sympa 3.3.6b.4,
- sympa 3.3.6b.5,
- sympa 3.3.6b.6,
- sympa 3.3b.3,
- sympa 3.3b.4,
- sympa 3.4,
- sympa 4.0.a1,
- sympa 4.0.a3,
- sympa 4.0.a4,
- sympa 4.0.a5,
- sympa 4.0.a6,
- sympa 4.0.a7,
- sympa 4.0.a8,
- sympa 4.0.a9,
- sympa 4.0.b1,
- sympa 4.0.b2,
- sympa 4.0.b3,
- sympa 4.1,
- sympa 4.2b.1,
- sympa 4.2b.3,
- sympa 5.0,
- sympa 5.0a,
- sympa 5.0a.1,
- sympa 5.0b,
- sympa 5.0b.1,
- sympa 5.1,
- sympa 5.1.2,
- sympa 5.2,
- sympa 5.2b,
- sympa 5.2b2,
- sympa 5.3,
- sympa 5.3.2,
- sympa 5.3a.10,
- sympa 5.3a.8,
- sympa 5.3a.9,
- sympa 5.3b.1,
- sympa 5.3b.3,
- sympa 5.3b.4,
- sympa 5.3b.5,
- sympa 5.4,
- sympa 5.4.1,
- sympa 5.4.2,
- sympa 5.4.3,
- sympa 5.4a.2,
- sympa 5.4a.4,
- sympa 5.4b.1,
- sympa 6.0,
- sympa 6.0.1,
- sympa 6.0.2,
- sympa 6.0.3,
- sympa 6.0.4,
- sympa 6.0.5,
- sympa 6.0.6,
- sympa 6.0b.1,
- sympa 6.0b.2,
- sympa 6.0b.3,
- sympa 6.0b.4,
- sympa 6.1.1,
- sympa 6.1.2,
- sympa 6.1.3,
- sympa 6.1.4,
- sympa 6.1.5,
- sympa 6.1.6,
- sympa 6.1.7,
- sympa 6.1.8,
- sympa 6.1.9,
- sympa 6.1b.1,
- sympa 6.1b.2,
- sympa 6.1b.3,
- sympa 6.1b.4,
- sympa 6.1b.6
References
Advisory
Additional Info
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below: