[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249966

 
 

909

 
 

195636

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2010-0668Date: (C)2010-02-26   (M)2023-12-22


Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.8
Exploit Score: 8.6
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
BID-38023
SECUNIA-38444
SECUNIA-38709
SECUNIA-38903
OSVDB-62043
ADV-2010-0266
ADV-2010-0600
DSA-2014
FEDORA-2010-1712
FEDORA-2010-1743
http://www.openwall.com/lists/oss-security/2010/02/15/2
http://marc.info/?l=oss-security&m=126625972814888&w=2
http://marc.info/?l=oss-security&m=126676896601156&w=2
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=569975
http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES
http://moinmo.in/MoinMoinRelease1.8
http://moinmo.in/SecurityFixes
https://bugzilla.redhat.com/show_bug.cgi?id=565604
moinmoin-superuser-unspecified(56002)

CPE    46
cpe:/a:moinmo:moinmoin:1.5.0:rc1
cpe:/a:moinmo:moinmoin:1.5.8
cpe:/a:moinmo:moinmoin:1.5.7
cpe:/a:moinmo:moinmoin:1.8.3
...
OVAL    3
oval:org.secpod.oval:def:700126
oval:org.mitre.oval:def:7566
oval:org.secpod.oval:def:100875

© SecPod Technologies