Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Gentoo: GLSA-202310-15 Critical: DokuWiki File Exposure Vulnerability

gentoo
Calendar Grey August 18, 2009
Scroller Gentoo
Vulnerabilities in DokuWiki pertaining to local file inclusion could enable malicious actors to run arbitrary code or access sensitive documents. Ensure to update immediately!
An input sanitation error in DokuWiki might lead to the dislosure of local files or even the remote execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200908-09 https://security.gentoo.org/ Severity: High Title: DokuWiki: Local file inclusion Date: August 18, 2009 Bugs: #272431 ID: 200908-09

Synopsis ======= An input sanitation error in DokuWiki might lead to the dislosure of local files or even the remote execution of arbitrary code.
Background ========= DokuWiki is a standards compliant Wiki system written in PHP.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apps/dokuwiki < 2009-02-14b >= 2009-02-14b
========== girex reported that data from the "config_cascade" parameter in inc/init.php is not properly sanitized before being used.
Impact ===== A remote attacker could ex...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Gentoo high severity remote execution input sanitation local file inclusion DokuWiki

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory Gentoo high severity remote execution input sanitation local file inclusion DokuWiki

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround