*** This bug is a security vulnerability *** Public security bug reported:
Binary package hint: moin References: DSA-1514-1 (http://www.debian.org/security/2008/dsa-1514) Quoting: "Several remote vulnerabilities have been discovered in MoinMoin, a Python clone of WikiWiki. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-2423 A cross-site-scripting vulnerability has been discovered in attachment handling. CVE-2007-2637 Access control lists for calendars and includes were insufficiently enforced, which could lead to information disclosure. CVE-2008-0780 A cross-site-scripting vulnerability has been discovered in the login code. CVE-2008-0781 A cross-site-scripting vulnerability has been discovered in attachment handling. CVE-2008-0782 A directory traversal vulnerability in cookie handling could lead to local denial of service by overwriting files. CVE-2008-1098 Cross-site-scripting vulnerabilities have been discovered in the GUI editor formatter and the code to delete pages. CVE-2008-1099 The macro code validates access control lists insufficiently, which could lead to information disclosure." ** Affects: moin (Ubuntu) Importance: Undecided Status: New ** Visibility changed to: Public ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2007-2423 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2007-2637 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-0780 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-0781 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-0782 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-1098 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-1099 -- [moin] [DSA-1514-1] multiple vulnerabilities https://bugs.launchpad.net/bugs/200897 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
