CVE-2011-0063

The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./.../ sequence in the "extra" parameter to the help command, which causes the regular expression to produce .. (dot dot) sequences. NOTE: this vulnerability is due to an incomplete fix for CVE-2011-0049.

• CWE-22

• http://secunia.com/advisories/43631Vendor Advisory
• http://securityreason.com/securityalert/8133
• http://sotiriu.de/adv/NSOADV-2011-003.txtExploit
• http://www.securityfocus.com/archive/1/516923/100/0/threaded
• https://bugzilla.mozilla.org/show_bug.cgi?id=631307Exploit, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66011
• http://secunia.com/advisories/43631Vendor Advisory
• http://securityreason.com/securityalert/8133
• http://sotiriu.de/adv/NSOADV-2011-003.txtExploit
• http://www.securityfocus.com/archive/1/516923/100/0/threaded
• https://bugzilla.mozilla.org/show_bug.cgi?id=631307Exploit, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66011

Published

Mar 15, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0057Use-after-free vulnerability in the Web Workers implementati…
• CVE-2011-0058Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x b…
• CVE-2011-0059Cross-site request forgery (CSRF) vulnerability in Mozilla F…
• CVE-2011-0060Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2011-0061Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thun…
• CVE-2011-0062Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2011-0064The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as…
• CVE-2011-0065Use-after-free vulnerability in Mozilla Firefox before 3.5.1…
• CVE-2011-0066Use-after-free vulnerability in Mozilla Firefox before 3.5.1…
• CVE-2011-0067Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and S…
• CVE-2011-0069Unspecified vulnerability in the browser engine in Mozilla F…
• CVE-2011-0070Unspecified vulnerability in the browser engine in Mozilla F…