Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Gentoo 200805-09 Normal: MoinMoin Privilege Escalation Issue

gentoo
Calendar Grey May 11, 2008
Scroller Gentoo Esm H88
A moderate risk flaw in MoinMoin enables remote privilege escalation. It's advisable to update to ensure that unauthorized access is blocked.
A vulnerability in MoinMoin may allow a remote attacker to elevate his privileges.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200805-09
                                            https://security.gentoo.org/

  Severity: Normal
     Title: MoinMoin: Privilege escalation
      Date: May 11, 2008
      Bugs: #218752
        ID: 200805-09


Synopsis
=======
A vulnerability in MoinMoin may allow a remote attacker to elevate his
privileges.

Background
=========
MoinMoin is an advanced and extensible Wiki Engine.

Affected packages
================
    -------------------------------------------------------------------
     Package            /  Vulnerable  /                    Unaffected
    -------------------------------------------------------------------
  1  www-apps/moinmoin       < 1.6.3                          >= 1.6.3

==========
It has been reported that the user form processing in the file
userform.py does not properly manage users when using Access Control
Lists or a non-empty superusers list.

Im...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo privilege escalation remote access user management normal severity moinmoin

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo privilege escalation remote access user management normal severity moinmoin

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround