748 matches found
CVE-2004-0708
CVE-2004-0708 affects MoinMoin 1.2.1 and earlier. The vulnerability allows privilege escalation by a remote attacker who creates a user with the same name as an existing group that has higher privileges. Documented impact is privilege escalation (not full remote code execution) with a CVSSv2 base...
CVE-2004-0708
MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges...
CVE-2004-0708
Removed by vendor...
moinmoin -- ACL group bypass
The moinmoin package contains two bugs with ACLs and anonymous users. Both bugs may permit anonymous users to gain access to administrative functions; for example the delete function. There is no known workaround, the vulnerability exists regardless if a site is using ACLs or not...
MoinMoin: Group ACL bypass
Background MoinMoin is a Python clone of WikiWiki, based on PikiPiki. Description MoinMoin contains a bug in the code handling administrative group ACLs. A user created with the same name as an administrative group gains the privileges of the administrative group. Impact If an administrative grou...
FreeBSD : MoinMoin administrative group name privilege escalation vulnerability (114)
The following package needs to be updated: moinmoin %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgda9e6438bfc011d8b00e000347a4fa7d.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
[UNIX] MoinMoin Administrative Group Name Privilege Escalation Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...