ikiwiki teximg插件不安全TeX命令信息泄露漏洞

BUGTRAQ ID: 36181 CVECAN ID: CVE-2009-2944 Ikiwiki是一个wiki编译器，可将wiki页面转换为可在网站发布的HTML页面。 Ikiwiki的teximg插件没有正确地将不安全的TeX命令加入到黑名单，本地攻击者可以使用这个命令读取系统上的任意文件内容。 ikiwiki 2.x 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1875-1）以及相应补丁: DSA-1875-1：New ikiwiki packages fix information disclosure...

CVE-2009-2944

Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands...

DEBIAN-CVE-2009-2944

Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands...

CVE-2009-2944

Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands...

CVE-2009-2944

Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands...

CVE-2009-2944

Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands...

openSUSE Security Update : moodle (moodle-803)

Special command sequences in TeX files allowed users to read arbitrary files CVE-2009-1171. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-803. The text description of this plugin is C...

openSUSE Security Update : moodle (moodle-803)

Special command sequences in TeX files allowed users to read arbitrary files CVE-2009-1171. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-803. The text description of this plugin is C...

CVE-2009-1382

Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long 1 picture, 2 circle, or 3 input tags...

CVE-2009-2459

Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the 1 \environ, 2 \input, and 3 \counter TeX directives...

DEBIAN-CVE-2009-2459

Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the 1 \environ, 2 \input, and 3 \counter TeX directives...

DEBIAN-CVE-2009-1382

Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long 1 picture, 2 circle, or 3 input tags...

Code injection

Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the 1 \environ, 2 \input, and 3 \counter TeX directives...

CVE-2009-1382

Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long 1 picture, 2 circle, or 3 input tags...

Stack overflow

Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long 1 picture, 2 circle, or 3 input tags...

CVE-2009-2459

Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the 1 \environ, 2 \input, and 3 \counter TeX directives...

CVE-2009-1382

Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long 1 picture, 2 circle, or 3 input tags...

CVE-2009-2459

CVE-2009-2459 concerns mimeTeX/mimetex with multiple vulnerabilities related to TeX directives (e.g., \environ, \input, \counter) disclosed for versions prior to 20090713. Connected documents confirm concrete remediation: Fedora advisories and Nessus/OpenVAS entries note updates to mimetex (e.g.,...

CVE-2009-2459

Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the 1 \environ, 2 \input, and 3 \counter TeX directives...

CVE-2009-1382

Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long 1 picture, 2 circle, or 3 input tags...