Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

High Severity GLSA-200508-14: TikiWiki and eGroupWare XML-RPC Vulnerability

gentoo
Calendar Grey August 24, 2005
Scroller Gentoo
Critical warning issued for Gentoo users regarding TikiWiki and eGroupWare, highlighting potential vulnerabilities related to XML-RPC command execution threats.
TikiWiki and eGroupWare both include PHP XML-RPC code vulnerable to arbitrary command execution.

Summary

Gentoo Linux Security Advisory GLSA 200508-14 https://security.gentoo.org/ Severity: High Title: TikiWiki, eGroupWare: Arbitrary command execution through XML-RPC Date: August 24, 2005 Bugs: #102374, #102377 ID: 200508-14

Synopsis ======= TikiWiki and eGroupWare both include PHP XML-RPC code vulnerable to arbitrary command execution.
Background ========= TikiWiki is a full featured Free Software Wiki, CMS and Groupware written in PHP. eGroupWare is a web-based collaboration software suite. Both TikiWiki and eGroupWare include a PHP library to handle XML-RPC requests.
...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround