FKIE_CVE-2012-2352
Vulnerability from fkie_nvd - Published: 2012-05-31 17:55 - Updated: 2026-06-16 23:41
Severity
Summary
The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the (1) do_arc_manage, (2) do_arc_download, or (3) do_arc_delete functions.
References
Impacted products
{
"affected": [
{
"affectedData": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"source": "secalert@redhat.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sympa:sympa:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C17B27AC-23E2-434F-9BB7-18AF15939944",
"versionEndIncluding": "6.1.10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:0.001:*:*:*:*:*:*:*",
"matchCriteriaId": "F3208BF5-1B63-4953-8802-7426C8F80AD0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:0.002:*:*:*:*:*:*:*",
"matchCriteriaId": "D0E6B4F7-D4FA-4318-8759-A1A02A4A0C9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:0.003:*:*:*:*:*:*:*",
"matchCriteriaId": "96D2C734-A49E-493E-B5C2-91088F2D85CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:0.004:*:*:*:*:*:*:*",
"matchCriteriaId": "56E0BD7B-42BE-480C-9262-CEBCFBB986AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:0.005:*:*:*:*:*:*:*",
"matchCriteriaId": "5D4B3903-6668-4506-A781-0A9D9B8BF28F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:0.006:*:*:*:*:*:*:*",
"matchCriteriaId": "90ED75CB-779F-48F2-BA15-75D63B0D3096",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:0.007:*:*:*:*:*:*:*",
"matchCriteriaId": "D3F1B140-62B0-473A-B6B1-17B4F617D89C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:0.008:*:*:*:*:*:*:*",
"matchCriteriaId": "5D1E43F5-532C-4A83-84AA-AF9126CE2CF7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:0.009:*:*:*:*:*:*:*",
"matchCriteriaId": "4C2BDA2D-43B8-4D2A-8DE4-4C77AAF97947",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:0.010:*:*:*:*:*:*:*",
"matchCriteriaId": "724A3C0A-9BC2-4AA6-AE96-F8C55FC48849",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:0.011:*:*:*:*:*:*:*",
"matchCriteriaId": "1E68DF4F-2128-4C94-8E22-CD7211516348",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A0C9A23B-C8AF-49D9-9903-7DE02BFDD67D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "029358EB-0364-4D97-B829-85119DFA52BB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "074D0A2E-F47E-4F33-A6B7-113AB7F06A10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A2885638-1FA3-4999-8E41-9D2AD3C05A8F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "C31299BE-61F5-4908-B2C1-47292E980329",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.3.1-2:*:*:*:*:*:*:*",
"matchCriteriaId": "3C420CC8-44C1-4802-8A95-E600B9AB7081",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "47B1A3C1-8620-4606-A82E-B711DB5BC73B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "C3E6A6F6-2879-4AC3-AEBB-0A0FE1C809EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "EC66B684-8ECB-41AA-B5F9-2B3F8C099C3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.3.4-1:*:*:*:*:*:*:*",
"matchCriteriaId": "1CEC4E75-F8F2-4BCA-9743-7FB0B62C2CB2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "86ED13ED-1C4A-4A96-9CBC-1CBD37D3C9E0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6614D477-FAFA-40DB-AB50-988C9C32C144",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.4.2:*:*:*:*:*:*:*",
"matchCriteriaId": "0F8A8E19-79A6-4F66-8156-B18128E30D95",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.4.2-1:*:*:*:*:*:*:*",
"matchCriteriaId": "813952B1-A3EF-4BDD-9D60-60400ADC2F12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "F5C84691-7FC4-4AB4-9347-CBD35FF4DAD4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.2.1b:*:*:*:*:*:*:*",
"matchCriteriaId": "CA008F46-8282-45C5-9098-4E5AC4EEA9D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.2.2b:*:*:*:*:*:*:*",
"matchCriteriaId": "CB906126-2D66-4148-8F96-DA50CE6998C6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.2.3b:*:*:*:*:*:*:*",
"matchCriteriaId": "677ED6AF-066D-40B6-835D-6278BC7B417B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "69588B6A-CA26-4AF5-8D58-811EF810886C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "32269B73-089E-43FA-8685-E6FF186C5EA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "8160B236-0410-4789-9B02-4B8128BC791B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "55FACF98-3A75-4428-B761-05C67183367E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.2b:*:*:*:*:*:*:*",
"matchCriteriaId": "8C4AFACC-511E-4022-902C-ECCEE24AC292",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.3:beta:*:*:*:*:*:*",
"matchCriteriaId": "25E2CF09-112D-43B5-A556-DC21FA59BC11",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E5690073-7AA6-4CC1-A4E1-34AB6236061F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "49569B6B-F42F-4C11-84EF-90B29E70AD99",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "0031C064-F2A5-42D3-8926-C78618862B2F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "457C43C9-D11D-4403-89C8-2231A83FD696",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "59CFB558-6C22-45A8-B902-641B5EE699CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "7B12ECDA-0392-4A96-B3C7-5449131A4454",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "0A5B0A99-4439-4EAD-B5F0-02BE4C0CCC26",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F68DE2B2-F6BA-4286-A1D9-C03F54EDB784",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "CA964AEF-5B79-49A2-922D-2EEDD8FBCC74",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.5.3b:*:*:*:*:*:*:*",
"matchCriteriaId": "12232649-60D4-413B-83A6-BF50767ECE65",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.5.4b:*:*:*:*:*:*:*",
"matchCriteriaId": "1659E3A0-BC47-4510-A533-F12EA8E95574",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "D5573757-2E17-4B2D-8F83-415A0CBC2231",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9277362E-954C-45CA-8FD3-FCB6DF81D9D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "8BBCDF02-2F13-4900-A449-0F624094A8ED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E7B3F8C0-9A20-4A68-B3D7-24188588B8D5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "0D8D995E-3634-4D70-84F9-D3626267C47B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.7.3:*:*:*:*:*:*:*",
"matchCriteriaId": "63EC9E16-1BF1-4999-B10E-3F3E36069560",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.7a:*:*:*:*:*:*:*",
"matchCriteriaId": "122E99D7-7C43-4E84-A00C-640A827373C5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.7b.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6D35E600-9CD2-49C5-915C-BF3CA783DFAC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.7b.2:*:*:*:*:*:*:*",
"matchCriteriaId": "2744A6B5-8BC1-45B4-8693-1FDB4FA129B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:2.7b.3:*:*:*:*:*:*:*",
"matchCriteriaId": "7813C195-3774-423F-A516-F7A9EE088AA1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "88CDE8A4-792B-4D2E-A722-4404D1EC73A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.0a:*:*:*:*:*:*:*",
"matchCriteriaId": "3F9AC9AE-1D8D-4979-B01D-DC2C4CF2B346",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.0a.1:*:*:*:*:*:*:*",
"matchCriteriaId": "826A12E1-8CEB-4C4C-98A6-BE7983532CB5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.0b.4:*:*:*:*:*:*:*",
"matchCriteriaId": "2DBC7E6D-12E0-404F-95CA-6ED534B1988C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.0b.8:*:*:*:*:*:*:*",
"matchCriteriaId": "ED42E06D-A2A7-4A4D-9F04-C64218F136B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.0b.9:*:*:*:*:*:*:*",
"matchCriteriaId": "7D438CB2-B956-46FA-9B8C-A8D88CE4B2C1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "D7614757-F106-4EEF-8086-00B9D4C813CC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A51FCAC6-A1BE-45B6-8319-43ACA7E761A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.1b.7:*:*:*:*:*:*:*",
"matchCriteriaId": "534B15A7-1047-4AD1-B4DD-E3D22925CC72",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.1b.8:*:*:*:*:*:*:*",
"matchCriteriaId": "EE21D81C-245A-494D-A38E-5DD3D40266BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.1b.9:*:*:*:*:*:*:*",
"matchCriteriaId": "E77134DA-7D36-44D2-B9E5-20CCD0F5B9DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.1b.10:*:*:*:*:*:*:*",
"matchCriteriaId": "429D2C09-CBBA-45AE-A588-24978052E9F2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.1b.12:*:*:*:*:*:*:*",
"matchCriteriaId": "70919A0E-E97E-408C-8369-0C484D66BA2B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.1b.13:*:*:*:*:*:*:*",
"matchCriteriaId": "910EC1FB-C86D-4082-AEE3-816918AFE059",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "1C8AEF83-C528-47F6-AB5A-EE220F248E75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "00735DD5-28EB-471E-A752-58758A0DB0C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.2.2a:*:*:*:*:*:*:*",
"matchCriteriaId": "2948FC69-B3AF-48AE-A752-5E85D55EE0A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "75180EC6-7333-439E-8349-07E0B7985EF5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "08C5B74E-A70C-415F-9158-FD777030C0EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8DD97291-4C62-465F-8DDB-BD9AB1818C27",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.4b.3:*:*:*:*:*:*:*",
"matchCriteriaId": "07D1AE25-96D2-4BDE-A1A8-21BE5442A6D0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.4b.4:*:*:*:*:*:*:*",
"matchCriteriaId": "AEBC95C6-910E-4F44-9255-4EA439688EB4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.4b.5:*:*:*:*:*:*:*",
"matchCriteriaId": "7D2C5394-51B5-4068-8C92-681B6CB5D3C1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.4b.6:*:*:*:*:*:*:*",
"matchCriteriaId": "98AD402F-3EEB-491D-9CD8-E18C55D016BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.4b.7:*:*:*:*:*:*:*",
"matchCriteriaId": "5C8DE4F5-86AA-41E5-8058-F59A1D25CEF4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.4b.8:*:*:*:*:*:*:*",
"matchCriteriaId": "72DC6557-D9BF-47B0-BC67-F6EAC89974B2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.4b.9:*:*:*:*:*:*:*",
"matchCriteriaId": "B73FAEE4-E1A2-4D71-B8A9-37981D26920A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "BC1891AE-B74E-47E1-B3E8-024E28CA1632",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.6b.1:*:*:*:*:*:*:*",
"matchCriteriaId": "12943A0D-5E1E-4842-AD2E-4CE7E2F94640",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.6b.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B06E726D-1C76-4E4D-886A-F1763097EBC7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.6b.3:*:*:*:*:*:*:*",
"matchCriteriaId": "52242171-94E3-4D63-AE73-9BD2F37EECE6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.6b.4:*:*:*:*:*:*:*",
"matchCriteriaId": "AA439B9D-928C-44BE-BCF5-5D1503979605",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.6b.5:*:*:*:*:*:*:*",
"matchCriteriaId": "9776D60D-91F2-4562-AE83-DD695D62016F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3.6b.6:*:*:*:*:*:*:*",
"matchCriteriaId": "AF05F122-E643-4648-B464-F2A542A59293",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3b.3:*:*:*:*:*:*:*",
"matchCriteriaId": "50B681F5-94E5-4185-9F6D-AD0762B1A690",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.3b.4:*:*:*:*:*:*:*",
"matchCriteriaId": "BD8E341C-F4A5-415B-B7C2-81AF7FB0A986",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "F961F141-5B14-4AB2-BEAE-5F0341DFCBBC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.0.a1:*:*:*:*:*:*:*",
"matchCriteriaId": "EA40B80D-DBAC-49C7-8AB5-918CD2DB0C3B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.0.a3:*:*:*:*:*:*:*",
"matchCriteriaId": "C621BCEE-887A-4B1B-A048-D3636B9EFFD2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.0.a4:*:*:*:*:*:*:*",
"matchCriteriaId": "947C74D5-BDD5-4529-AE6A-522CD8903BE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.0.a5:*:*:*:*:*:*:*",
"matchCriteriaId": "70FDCE81-C624-425C-B678-935416D5D183",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.0.a6:*:*:*:*:*:*:*",
"matchCriteriaId": "509E103D-7D66-4C71-883F-87BFB9134947",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.0.a7:*:*:*:*:*:*:*",
"matchCriteriaId": "A46EB3D7-6926-486A-B731-27887F58CF93",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.0.a8:*:*:*:*:*:*:*",
"matchCriteriaId": "52551262-2531-430C-A2B9-51F42FCA8FCD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.0.a9:*:*:*:*:*:*:*",
"matchCriteriaId": "18762458-1469-45F0-B9F2-701602A76C73",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.0.b1:*:*:*:*:*:*:*",
"matchCriteriaId": "BD593FAE-71B9-4C04-B183-2A3083FDA276",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.0.b2:*:*:*:*:*:*:*",
"matchCriteriaId": "2F6494CE-0E9D-4B56-A09F-C3080B6F6974",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.0.b3:*:*:*:*:*:*:*",
"matchCriteriaId": "65583ADB-CB47-4E8B-83C1-5AC24A0A5076",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A6C16EFE-0F19-4082-8A0A-B8EAD35C2D70",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.2b.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2FB797E2-74B9-4EDE-A61A-BAEEF7104660",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:4.2b.3:*:*:*:*:*:*:*",
"matchCriteriaId": "BC0B8BCB-0CA5-48AB-AEDE-DFA56E267B16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "36476C74-E8EC-46B1-A044-1D4EB939795C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.0a:*:*:*:*:*:*:*",
"matchCriteriaId": "2C566DEF-E3C0-4FB5-BFB6-D243DAA84DF5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.0a.1:*:*:*:*:*:*:*",
"matchCriteriaId": "511F87A0-B85D-479E-9BD9-3A301F7E0F15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.0b:*:*:*:*:*:*:*",
"matchCriteriaId": "691C2460-35EF-4E25-A75E-0DBAF0C47B82",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.0b.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8B952E38-C0CA-4411-952B-40D53F5E377B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A6997C75-36E1-41BE-BF29-1A2929917995",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB6A0762-9D17-4591-9C35-0FE241B0E11A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "4C62FDF7-898B-4492-9640-40939436CA8D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.2b:*:*:*:*:*:*:*",
"matchCriteriaId": "9049087A-4A1C-4538-AA88-F3AFA0134B85",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.2b2:*:*:*:*:*:*:*",
"matchCriteriaId": "9ADAB39A-CEF6-427F-AFF3-7D1A22B6B9A7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.3:*:*:*:*:*:*:*",
"matchCriteriaId": "5947A7FF-4397-4CEB-ABF6-0543FACAC891",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "24FEA9D2-D8DB-45ED-B1EA-810439C110E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.3a.8:*:*:*:*:*:*:*",
"matchCriteriaId": "3235F808-1AB4-484E-AD27-7A7D3419B664",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.3a.9:*:*:*:*:*:*:*",
"matchCriteriaId": "7DCB5592-4C54-466C-945A-393CF8F7C058",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.3a.10:*:*:*:*:*:*:*",
"matchCriteriaId": "26B4AAE7-3B2A-4977-AA9E-8D7201E0154F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.3b.1:*:*:*:*:*:*:*",
"matchCriteriaId": "42B7F70E-95E8-4604-A53A-514AC110E604",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.3b.3:*:*:*:*:*:*:*",
"matchCriteriaId": "43536723-E89C-4BC6-AD3E-88B614A53D15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.3b.4:*:*:*:*:*:*:*",
"matchCriteriaId": "F7A2F899-15C0-4260-979F-6989056F3A03",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.3b.5:*:*:*:*:*:*:*",
"matchCriteriaId": "01A3B273-D793-4F97-B1C1-96DE8B7F6E80",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.4:*:*:*:*:*:*:*",
"matchCriteriaId": "52082B40-C619-4389-9403-6DF6610AB721",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7C9982EC-F4E7-4154-90CE-A5744B3AF034",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.4.2:*:*:*:*:*:*:*",
"matchCriteriaId": "484B19A0-06CB-4820-AD58-540657C475E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.4.3:*:*:*:*:*:*:*",
"matchCriteriaId": "BA761279-C483-4C2E-9A9A-EE07E152277C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.4a.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C1B9C45A-21C1-4CA6-B65D-730D35070DB3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.4a.4:*:*:*:*:*:*:*",
"matchCriteriaId": "10022D33-92E5-4F27-A98A-8EE68AF39E2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:5.4b.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5A874DDD-ECC0-478C-8029-198B1109215B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D3308CE8-847C-4D6B-BCFC-B860B7D9EAFF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "D2BB62E4-8207-4344-87CE-FB916E7ECA90",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "304DCEDD-661D-400A-94AB-B0DB20843327",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "05707525-5CD4-49DA-B137-D6F3F793BB40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "FB1AF942-E11C-4FF2-863E-E1C47D76D485",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "01016580-A947-4DE4-9033-4697CE9AF12A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "B5F00F31-CA66-43E8-8FE8-3DE0AC483C6B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.0b.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F60DB8C7-6D44-480B-A0F3-B7A6220F7F78",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.0b.2:*:*:*:*:*:*:*",
"matchCriteriaId": "BA32E7A9-896E-4D13-A56E-6E463179F464",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.0b.3:*:*:*:*:*:*:*",
"matchCriteriaId": "F43DDD64-605C-4783-A22D-F6B2C1526C74",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.0b.4:*:*:*:*:*:*:*",
"matchCriteriaId": "67484472-F2A7-4C78-A7DD-25A267E9BFD8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "CE3806CA-EFF4-4DC1-827D-D720155231FB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "2D74B084-02D3-4410-85BA-9C624A29BFC6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "81F89FD3-5FF5-498A-8909-E31D62AB42B8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "CB7F80BB-388F-41A7-BCD2-46EA20DC2E6B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "F5CB2B7F-325F-489D-98DF-89D2173EF676",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1.6:*:*:*:*:*:*:*",
"matchCriteriaId": "4C251761-00A7-4C37-A9DC-E34F4BC40208",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1.7:*:*:*:*:*:*:*",
"matchCriteriaId": "76A7EE36-064D-4498-AC81-349CE832C03A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1.8:*:*:*:*:*:*:*",
"matchCriteriaId": "0560EDE9-268B-45F0-A3F0-88781EA52A7A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1.9:*:*:*:*:*:*:*",
"matchCriteriaId": "38AD95A8-6074-43ED-806F-E1512A4ED2D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1b.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9398726E-FE63-4A0E-A86C-E5332DA9E1CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1b.2:*:*:*:*:*:*:*",
"matchCriteriaId": "7D539B3E-7CE5-4823-93AE-47319B5DA191",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1b.3:*:*:*:*:*:*:*",
"matchCriteriaId": "40858C6C-7053-4CF0-9054-E23EB77E19E0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1b.4:*:*:*:*:*:*:*",
"matchCriteriaId": "3B668EDE-876B-43B7-B345-C0617B4FBEC7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sympa:sympa:6.1b.6:*:*:*:*:*:*:*",
"matchCriteriaId": "BB8B7497-7A1E-438B-820B-D24A9E2DA9CD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the (1) do_arc_manage, (2) do_arc_download, or (3) do_arc_delete functions."
},
{
"lang": "es",
"value": "La p\u00e1gina de gesti\u00f3n de archivos (arc_manage) en WWSympa/wwsympa.fcgi.in en Sympa antes del v6.1.11 no comprueba los permisos, lo que permite a atacantes remotos listar, leer y borrar archivos de lista de su elecci\u00f3n a trav\u00e9s de vectores relacionados con las funciones (a) do_arc_manage, (2) do_arc_download, o (3) do_arc_delete."
}
],
"id": "CVE-2012-2352",
"lastModified": "2026-06-16T23:41:24.250",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2012-05-31T17:55:04.887",
"references": [
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/49045"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/49237"
},
{
"source": "secalert@redhat.com",
"url": "http://www.debian.org/security/2012/dsa-2477"
},
{
"source": "secalert@redhat.com",
"url": "http://www.openwall.com/lists/oss-security/2012/05/11/8"
},
{
"source": "secalert@redhat.com",
"url": "http://www.openwall.com/lists/oss-security/2012/05/12/2"
},
{
"source": "secalert@redhat.com",
"url": "http://www.openwall.com/lists/oss-security/2012/05/12/8"
},
{
"source": "secalert@redhat.com",
"url": "http://www.osvdb.org/81890"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/bid/53503"
},
{
"source": "secalert@redhat.com",
"url": "https://sourcesup.renater.fr/scm/viewvc.php/branches/sympa-6.0-branch/wwsympa/wwsympa.fcgi.in?root=sympa\u0026r1=6706\u0026r2=7358\u0026pathrev=7358"
},
{
"source": "secalert@redhat.com",
"url": "https://www.sympa.org/distribution/latest-stable/NEWS"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/49045"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/49237"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2012/dsa-2477"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openwall.com/lists/oss-security/2012/05/11/8"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openwall.com/lists/oss-security/2012/05/12/2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openwall.com/lists/oss-security/2012/05/12/8"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.osvdb.org/81890"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/53503"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://sourcesup.renater.fr/scm/viewvc.php/branches/sympa-6.0-branch/wwsympa/wwsympa.fcgi.in?root=sympa\u0026r1=6706\u0026r2=7358\u0026pathrev=7358"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://www.sympa.org/distribution/latest-stable/NEWS"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-264"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.