VIR Vulnerability Intelligence Relay

CVE-2011-0063

medium
Published 2011-03-15 · Modified 2026-04-29
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
6.0

Description

The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./.../ sequence in the "extra" parameter to the help command, which causes the regular expression to produce .. (dot dot) sequences. NOTE: this vulnerability is due to an incomplete fix for CVE-2011-0049.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Exploits

Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.

Exploit-DB

EDB-16103 remote multiple verified
Michael Brooks · 2011-02-03

Majordomo2 - 'SMTP/HTTP' Directory Traversal

Source code queued for fetch — refresh in a moment.

Metasploit modules

auxiliary_scanner/http/majordomo2_directory_traversal rank 300
Majordomo2 _list_file_get() Directory Traversal
Source code queued for fetch — refresh in a moment.

Application impact
VendorProductVersionsFixed
mj2majordomo_2{"endIncluding":"20110203"}
mj2majordomo_220110101
mj2majordomo_220110102
mj2majordomo_220110103
mj2majordomo_220110104
mj2majordomo_220110105
mj2majordomo_220110106
mj2majordomo_220110107
mj2majordomo_220110108
mj2majordomo_220110109
mj2majordomo_220110110
mj2majordomo_220110111
mj2majordomo_220110112
mj2majordomo_220110113
mj2majordomo_220110114
mj2majordomo_220110115
mj2majordomo_220110116
mj2majordomo_220110117
mj2majordomo_220110118
mj2majordomo_220110119
mj2majordomo_220110120
mj2majordomo_220110121
mj2majordomo_220110122
mj2majordomo_220110123
mj2majordomo_220110124
mj2majordomo_220110125
mj2majordomo_220110126
mj2majordomo_220110127
mj2majordomo_220110128
mj2majordomo_220110129
mj2majordomo_220110130
mj2majordomo_220110131
mj2majordomo_220110201
mj2majordomo_220110202

References

CWEs

CWE-22

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.