CVE-2010-0667
Summary
| CVE | CVE-2010-0667 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2010-02-26 19:30:00 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:L/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| '[oss-security] Re: CVE Request -- MoinMoin -- 1.8.7' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| SecurityFixes - MoinMoin | af854a3a-2127-422b-91ae-364da2661108 | moinmo.in | Vendor Advisory |
| moin/1.9: changeset 5459:04afdde50094 | af854a3a-2127-422b-91ae-364da2661108 | hg.moinmo.in | |
| oss-security - CVE Request -- MoinMoin -- 1.8.7 | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| 502 Bad Gateway | af854a3a-2127-422b-91ae-364da2661108 | hg.moinmo.in | |
| MoinMoin "sys.argv" Information Disclosure Vulnerability - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| oss-security - CVE request: MoinMoin information disclosure | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| MoinMoinChat/Logs/moin-dev/2010-01-18 - MoinMoin | af854a3a-2127-422b-91ae-364da2661108 | moinmo.in | |
| moin/1.9: changeset 5461:9d8e7ce3c3a2 | af854a3a-2127-422b-91ae-364da2661108 | hg.moinmo.in | |
| '[oss-security] Re: CVE Request -- MoinMoin -- 1.8.7' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 998086 Python (Pip) Security Update for moin (GHSA-876c-qmcf-cxv6)