CVE:CVE-2011-0063
CNNVD:CNNVD-201103-203
Majordomo是一个流行的用Perl实现的(majordomo.pl)处理邮件列表的软件。
Majordomo 2 20110203及之前版本的lib/Majordomo.pm中的_list_file_get函数中存在路径遍历漏洞。远程攻击者可以借助向help命令传递的"extra"参数中的./.../序列，进行目录遍历攻击并读取任意文件。
solution:Upgrade mj2 majordomo_2 to a higher version than 20110203,20110101,20110102,20110103,20110104,20110105,20110106,20110107,20110108,20110109,20110110,20110111,20110112,20110113,20110114,20110115,20110116,20110117,20110118,20110119,20110120,20110121,20110122,20110123,20110124,20110125,20110126,20110127,20110128,20110129,20110130,20110131,20110201,20110202,and avoid the version (,20110203],20110101,20110102,20110103,20110104,20110105,20110106,20110107,20110108,20110109,20110110,20110111,20110112,20110113,20110114,20110115,20110116,20110117,20110118,20110119,20110120,20110121,20110122,20110123,20110124,20110125,20110126,20110127,20110128,20110129,20110130,20110131,20110201,20110202