CVE-2010-0668
CVE-2010-0668
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured.
EPSS 2.2% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
moin PyPI
- Versions
- 1.8.4
- 1.8.5
- 1.8.6
- Affected ranges
- ECOSYSTEM: ≥ 1.5, < 1.8.7
Update to 1.8.7
moin PyPI
- Versions
- 1.9.0
- 1.9.1
- Affected ranges
- ECOSYSTEM: ≥ 1.9, < 1.9.2
Update to 1.9.2
moin PyPI
- Versions
- 1.8.4
- 1.8.5
- 1.8.6
- 1.9.0
- 1.9.1
- Affected ranges
- ECOSYSTEM: ≥ 1.8, < 1.8.7 ∪ ≥ 1.9, < 1.9.2
Update to 1.8.7; Update to 1.9.2
Original sources
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56002
- http://www.openwall.com/lists/oss-security/2010/02/15/2
- http://www.securityfocus.com/bid/38023
- http://moinmo.in/SecurityFixes
- http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=569975
- https://bugzilla.redhat.com/show_bug.cgi?id=565604
- http://www.osvdb.org/62043
- http://marc.info/?l=oss-security&m=126676896601156&w=2
- http://moinmo.in/MoinMoinRelease1.8
- http://secunia.com/advisories/38709
- http://marc.info/?l=oss-security&m=126625972814888&w=2
- http://www.debian.org/security/2010/dsa-2014
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035438.html
- http://secunia.com/advisories/38444
- http://secunia.com/advisories/38903
- http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035374.html
- http://www.vupen.com/english/advisories/2010/0600
- http://www.vupen.com/english/advisories/2010/0266
- https://nvd.nist.gov/vuln/detail/CVE-2010-0668