16 matches found
EUVD-2009-2931
Malware in sbrugna...
SUSE CVE-2009-2944
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands...
Debian DSA-1875-1 : ikiwiki - missing input sanitising
Josh Triplett discovered that the blacklist for potentially harmful TeX code of the teximg module of the Ikiwiki wiki compiler was incomplete, resulting in information disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
FreeBSD Ports: ikiwiki
The remote host is missing an update to the system as announced in the referenced advisory. VID 6e8f54af-a07d-11de-a649-000c2955660f OpenVAS Vulnerability Test $ Description: Auto generated from VID 6e8f54af-a07d-11de-a649-000c2955660f Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
FreeBSD : ikiwiki -- insufficient blacklisting in teximg plugin (6e8f54af-a07d-11de-a649-000c2955660f)
The IkiWiki development team reports : IkiWikis teximg plugin's blacklisting of insecure TeX commands is insufficient; it can be bypassed and used to read arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...
ikiwiki Teximg Plugin TeX Command Arbitrary File Disclosure Vulnerability
This host has ikiwiki installed and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: gbikiwikiteximginfodisclosurevuln.nasl 4869 2016-12-29 11:01:45Z teissa $ ikiwiki Teximg Plugin TeX Command Arbitrary File Disclosure Vulnerability Authors: Antu Sanadi Copyright:...
ikiwiki Teximg Plugin TeX Command Arbitrary File Disclosure Vulnerability
ikiwiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ikiwiki teximg插件不安全TeX命令信息泄露漏洞
BUGTRAQ ID: 36181 CVECAN ID: CVE-2009-2944 Ikiwiki是一个wiki编译器,可将wiki页面转换为可在网站发布的HTML页面。 Ikiwiki的teximg插件没有正确地将不安全的TeX命令加入到黑名单,本地攻击者可以使用这个命令读取系统上的任意文件内容。 ikiwiki 2.x 厂商补丁: Debian ------ Debian已经为此发布了一个安全公告(DSA-1875-1)以及相应补丁: DSA-1875-1:New ikiwiki packages fix information disclosure...
CVE-2009-2944
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands...
CVE-2009-2944
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands...
DEBIAN-CVE-2009-2944
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands...
CVE-2009-2944
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands...
CVE-2009-2944
The CVE-2009-2944 entry concerns an incomplete blacklist in the teximg plugin of ikiwiki, allowing context-dependent attackers to read arbitrary files via crafted TeX commands. Affected software is ikiwiki with the teximg plugin, specifically versions before 3.1415926 and before 2.53.4 of the 2.x...
CVE-2009-2944
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands...
DSA-1875-1 ikiwiki - information disclosure
Bulletin has no description...
ikiwiki -- insufficient blacklisting in teximg plugin
The IkiWiki development team reports: IkiWikis teximg plugin's blacklisting of insecure TeX commands is insufficient; it can be bypassed and used to read arbitrary files...