Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
91
security advisorygentooremote accessGentoo: GLSA-200709-11 Moderate Severity: MediaWiki XSS Vulnerability
A vulnerability has been discovered in PhpWiki authentication mechanism.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200709-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Low Title: PhpWiki: Authentication bypass Date: September 18, 2007 Bugs: #181692 ID: 200709-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A vulnerability has been discovered in PhpWiki authentication mechanism. Background ========= PhpWiki is an application that creates a web site where anyone can edit the pages through HTML forms. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apps/phpwiki < 1.3.14 > = 1.3.14 Description ========== The PhpWiki development team reported an authentication error within the file lib/WikiUser/LDAP.php when binding to an LDAP server with an empty password. Impact ===== A remote attacker could provide an empty password when authenticating. Depending on the LDAP implementation used, this could bypass the PhpWiki authentication mechanism and grant the attacker access to the application. Workaround ========= There is no known workaround at this time. Resolution ========= All PhpWiki users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =www-apps/phpwiki-1.3.14" References ========= [ 1 ] CVE-2007-3193 https://www.cve.org/CVERecord?id=CVE-2007-3193 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200709-10 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Sep 18, 2007
•Low
Gentoo
91
security advisoryhigh severitygentooGentoo: 200705-16 Critical Risk for Remote Execution in PhpWiki Software
A vulnerability has been discovered in PhpWiki allowing for the remote execution of arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200705-16 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: PhpWiki: Remote execution of arbitrary code Date: May 17, 2007 Bugs: #174451 ID: 200705-16 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A vulnerability has been discovered in PhpWiki allowing for the remote execution of arbitrary code. Background ========= PhpWiki is an open source content management system written in PHP. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apps/phpwiki < 1.3.10-r3 > = 1.3.10-r3 Description ========== Harold Hallikainen has reported that the Upload page fails to properly check the extension of a file. Impact ===== A remote attacker could upload a specially crafted PHP file to the vulnerable server, resulting in the execution of arbitrary PHP code with the privileges of the user running PhpWiki. Workaround ========= There is no known workaround at this time. Resolution ========= All PhpWiki users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =www-apps/phpwiki-1.3.10-r3" References ========= [ 1 ] CVE-2007-2024 https://www.cve.org/CVERecord?id=CVE-2007-2024 [ 2 ] CVE-2007-2025 https://www.cve.org/CVERecord?id=CVE-2007-2025 Availability =========== This GLSA and any updates to it are available for viewing at the GentooSecurity Website: https://security.gentoo.org/glsa/200705-16 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
May 17, 2007
Gentoo
91
security advisoryhigh severitygentooGentoo GLSA-200508-18 High: PhpWiki Command Execution Through XML-RPC
PhpWiki includes PHP XML-RPC code which is vulnerable to arbitrary command execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200508-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: PhpWiki: Arbitrary command execution through XML-RPC Date: August 26, 2005 Bugs: #102380 ID: 200508-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= PhpWiki includes PHP XML-RPC code which is vulnerable to arbitrary command execution. Background ========= PhpWiki is an application that creates a web site where anyone can edit the pages through HTML forms. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apps/phpwiki < 1.3.10-r2 > = 1.3.10-r2 Description ========== Earlier versions of PhpWiki contain an XML-RPC library that improperly handles XML-RPC requests and responses with malformed nested tags. Impact ===== A remote attacker could exploit this vulnerability to inject arbitrary PHP script code into eval() statements by sending a specially crafted XML document to PhpWiki. Workaround ========= There is no known workaround at this time. Resolution ========= All PhpWiki users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =www-apps/phpwiki-1.3.10-r2" References ========= [ 1 ] CAN-2005-2498 https://www.cve.org/CVERecord?id=CAN-2005-2498 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200508-18 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Aug 26, 2005
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!