Endymion MailMan Alternate Templates File Disclosure Vulnerability

Bugtraq ID:	4222
Class:	Input Validation Error
CVE:	CVE-2002-0417
Remote:	Yes
Local:	No
Published:	Mar 04 2002 12:00AM
Updated:	Jul 11 2009 10:56AM
Credit:	Discovery of this issue is credited to Rudi Carrell.
Vulnerable:	Endymion MailMan WebMail 3.0.35 Endymion MailMan WebMail 3.0.34 Endymion MailMan WebMail 3.0.33 Endymion MailMan WebMail 3.0.32 Endymion MailMan WebMail 3.0.31 Endymion MailMan WebMail 3.0.30 Endymion MailMan WebMail 3.0.29 Endymion MailMan WebMail 3.0.28 Endymion MailMan WebMail 3.0.27 Endymion MailMan WebMail 3.0.26 Endymion MailMan WebMail 3.0.25 Endymion MailMan WebMail 3.0.24 Endymion MailMan WebMail 3.0.23 Endymion MailMan WebMail 3.0.22 Endymion MailMan WebMail 3.0.21 Endymion MailMan WebMail 3.0.20 Endymion MailMan WebMail 3.0.19 Endymion MailMan WebMail 3.0.18 Endymion MailMan WebMail 3.0.16 Endymion MailMan WebMail 3.0.15 Endymion MailMan WebMail 3.0.14 Endymion MailMan WebMail 3.0.13 Endymion MailMan WebMail 3.0.12 Endymion MailMan WebMail 3.0.11 Endymion MailMan WebMail 3.0.10 Endymion MailMan WebMail 3.0.8 Endymion MailMan WebMail 3.0.7 Endymion MailMan WebMail 3.0.6 Endymion MailMan WebMail 3.0.4 Endymion MailMan WebMail 3.0.1 Endymion MailMan WebMail 3.0

Not Vulnerable:	Endymion MailMan WebMail 3.1