Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-0288HistoryFeb 15, 2010 - 6:30 p.m.
CVE-2010-0288
2010-02-1518:30:00
Debian Security Bug Tracker
security-tracker.debian.org
9
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.015
Percentile
86.9%
A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | dokuwiki | < 0.0.20090214b-3.1 | dokuwiki_0.0.20090214b-3.1_all.deb |
| Debian | 11 | all | dokuwiki | < 0.0.20090214b-3.1 | dokuwiki_0.0.20090214b-3.1_all.deb |
| Debian | 999 | all | dokuwiki | < 0.0.20090214b-3.1 | dokuwiki_0.0.20090214b-3.1_all.deb |
| Debian | 13 | all | dokuwiki | < 0.0.20090214b-3.1 | dokuwiki_0.0.20090214b-3.1_all.deb |
Related
cvelist
cvelist
CVE-2010-0288
2010-02-15 18:00:00
prion
prion
Code injection
2010-02-15 18:30:00
nessus
nessus
DokuWiki ajax.php cmd[del] Parameter Security Bypass
2010-01-19 00:00:00
FreeBSD : dokuwiki -- multiple vulnerabilities (848539dc-0458-11df-8dd7-002170daae37)
2010-01-19 00:00:00
Fedora 11 : dokuwiki-0-0.4.20091225.c.fc11 (2010-0770)
2010-07-01 00:00:00
cve
cve
CVE-2010-0288
2010-02-15 18:30:00
ubuntucve
ubuntucve
CVE-2010-0288
2010-02-15 00:00:00
nvd
nvd
CVE-2010-0288
2010-02-15 18:30:00
exploitdb
exploitdb
dokuwiki 2009-12-25 - Multiple Vulnerabilities
2010-01-14 00:00:00
freebsd
freebsd
dokuwiki -- multiple vulnerabilities
2010-01-17 00:00:00
securityvulns
securityvulns
openvas
openvas
Fedora Update for dokuwiki FEDORA-2010-0770
2010-03-02 00:00:00
Fedora Update for dokuwiki FEDORA-2010-0770
2010-03-02 00:00:00
FreeBSD Ports: dokuwiki
2010-02-10 00:00:00
debian
debian
[Backports-security-announce] Security Update for dokuwiki
2010-02-04 19:59:59
[Backports-security-announce] Security Update for dokuwiki
2010-02-04 20:00:25
[SECURITY] [DSA-1976-1] New dokuwiki packages fix several vulnerabilities
2010-01-22 16:11:52
osv
osv
dokuwiki - several vulnerabilities
2010-01-22 00:00:00
gentoo
gentoo
DokuWiki: Multiple vulnerabilities
2013-01-09 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.015
Percentile
86.9%
Related for DEBIANCVE:CVE-2010-0288