Test ID:	1.3.6.1.4.1.25623.1.0.143551
Category:	Denial of Service
Title:	Sympa 6.2.38 <= 6.2.52 DoS Vulnerability
Summary:	Sympa is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Sympa is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: By submitting requests with malformed parameters, this flaw allows to create junk files in Sympa's directory for temporary files. And particularly by tampering token to prevent CSRF, it allows to originate excessive notification messages to listmasters. Affected Software/OS: Sympa versions 6.2.38 through 6.2.52. Solution: Update to version 6.2.54 or later or apply the provided patch. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-9369 Debian Security Information: DSA-4818 (Google Search) https://www.debian.org/security/2020/dsa-4818 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XO4WJYNNHWM7DUKCN4EWYYYPXZSOI7BQ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A3FUYYLV6URRLAJVWXNJYK2CNOKKNHXC/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6TMVZ5LVYCCIHGEC7RQUMGUE7DJWUXN7/ https://github.com/sympa-community/sympa/issues/886 https://sympa-community.github.io/security/2020-001.html
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.