Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-1099
HistoryMar 05, 2008 - 12:00 a.m.

CVE-2008-1099

2008-03-0500:00:00
ubuntu.com
ubuntu.com
13

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.008

Percentile

82.0%

_macro_Getval in wikimacro.py in MoinMoin 1.5.8 and earlier does not
properly enforce ACLs, which allows remote attackers to read protected
pages.

Bugs

Notes

Author Note
jdstrand 1.7 does not contain the vulnerable code
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmoin< 1.5.2-1ubuntu2.4UNKNOWN
ubuntu7.10noarchmoin< 1.5.7-3ubuntu2.1UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.008

Percentile

82.0%