CVE-2007-2423

Related Files

Debian Linux Security Advisory 1514-1

Posted Mar 12, 2008

Authored by Debian | Site debian.org

Debian Security Advisory 1514-1 - Several remote vulnerabilities have been discovered in MoinMoin, a Python clone of WikiWiki.

tags | advisory, remote, vulnerability, python

systems | linux, debian

advisories | CVE-2007-2423, CVE-2007-2637, CVE-2008-0780, CVE-2008-0781, CVE-2008-0782, CVE-2008-1098, CVE-2008-1099

SHA-256 | a2f5c6b016c84fc59c8f31f0debb4f0598e00c12e3a7970f8d359ccb4f790a83

Download | Favorite | View

Ubuntu Security Notice 458-1

Posted May 10, 2007

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 458-1 - A flaw was discovered in MoinMoin's error reporting when using the AttachFile action. By tricking a user into viewing a crafted MoinMoin URL, an attacker could execute arbitrary JavaScript as the current MoinMoin user, possibly exposing the user's authentication information for the domain where MoinMoin was hosted. Flaws were discovered in MoinMoin's ACL handling for calendars and includes. Unauthorized users would be able to read pages that would otherwise be unavailable to them.

tags | advisory, arbitrary, javascript

systems | linux, ubuntu

advisories | CVE-2007-2423

SHA-256 | 79ff4007940ac7bc6cb3a1e7d6bfafb16c9d212d42fe70817b345ccb7b9731de

Download | Favorite | View