852 matches found
MoinMoin: Group ACL bypass
Background MoinMoin is a Python clone of WikiWiki, based on PikiPiki. Description MoinMoin contains two unspecified bugs, one allowing anonymous users elevated access when not using ACLs, and the other in the ACL handling in the PageEditor. Impact Restrictions on anonymous users were not properly...
CVE-2004-0708
MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges...
CVE-2004-0708
Removed by vendor...
CVE-2004-0708
MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges...
CVE-2004-0708
CVE-2004-0708 affects MoinMoin 1.2.1 and earlier. The vulnerability allows privilege escalation by a remote attacker who creates a user with the same name as an existing group that has higher privileges. Documented impact is privilege escalation (not full remote code execution) with a CVSSv2 base...
CVE-2004-0708: Undefined Security Weakness
MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges...
PT-2004-1788
Name of the Vulnerable Software and Affected Versions MoinMoin versions 1.2.1 and earlier Description The issue allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges. Recommendations For MoinMoin versions 1.2.1 and earlier...
moinmoin -- ACL group bypass
The moinmoin package contains two bugs with ACLs and anonymous users. Both bugs may permit anonymous users to gain access to administrative functions; for example the delete function. There is no known workaround, the vulnerability exists regardless if a site is using ACLs or not...
MoinMoin: Group ACL bypass
Background MoinMoin is a Python clone of WikiWiki, based on PikiPiki. Description MoinMoin contains a bug in the code handling administrative group ACLs. A user created with the same name as an administrative group gains the privileges of the administrative group. Impact If an administrative grou...
FreeBSD : MoinMoin administrative group name privilege escalation vulnerability (114)
The following package needs to be updated: moinmoin %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgda9e6438bfc011d8b00e000347a4fa7d.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
[UNIX] MoinMoin Administrative Group Name Privilege Escalation Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...