Path traversal in Sympa - CVE-2018-1000550
Published: September 10, 2018
Vulnerability identifier: #VU14737
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-1000550
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to create or modify files on the filesystem.
The vulnerability exists due to input validation error when processing directory traversal sequences in wwsympa.fcgi when editing templates. A remote authenticated attacker can send a specially crafted HTTP GET or POST request and edit or create files on the system outside the webroot directory.
Affected software
Sympa
Ubuntu
sympa (Ubuntu package)
Ubuntu
sympa (Ubuntu package)
How to mitigate CVE-2018-1000550
Install updates from vendor's website.
Sympa - update to 6.2.32
sympa (Ubuntu package) - update to 6.1.17~dfsg-1ubuntu0.1~esm1
sympa (Ubuntu package) - update to 6.1.17~dfsg-1ubuntu0.1~esm1