CVE-2010-0667
CVE-2010-0667
This page contains facts from public vulnerability sources. Check the original advisory before updating.
MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS 8.7 · High · EPSS 1.9% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
Original sources
- http://www.openwall.com/lists/oss-security/2010/02/15/2
- http://moinmo.in/SecurityFixes
- http://hg.moinmo.in/moin/1.9/rev/04afdde50094
- http://moinmo.in/MoinMoinChat/Logs/moin-dev/2010-01-18
- http://marc.info/?l=oss-security&m=126676896601156&w=2
- http://www.openwall.com/lists/oss-security/2010/01/21/6
- http://hg.moinmo.in/moin/1.9/rev/9d8e7ce3c3a2
- http://hg.moinmo.in/moin/1.9/raw-file/1.9.1/docs/CHANGES
- http://marc.info/?l=oss-security&m=126625972814888&w=2
- http://secunia.com/advisories/38242
- https://nvd.nist.gov/vuln/detail/CVE-2010-0667