CVE-2011-0049: MJ2 Majordomo 2

Medium severity, CVSS 5.0. EPSS: 95.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the help command, as demonstrated using (1) a crafted email and (2) cgi-bin/mj_wwwusr in the web interface.

Affected products

• MJ2 Majordomo 2: up to and including 20110130; version 20110101 only; version 20110102 only; version 20110103 only; version 20110104 only; version 20110105 only; …

Published 2011-02-04. Last modified 2026-06-16.