BID:10805

MoinMoin Unspecified Privilege Escalation Vulnerability

Info

MoinMoin Unspecified Privilege Escalation Vulnerability

Bugtraq ID:	10805
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 26 2004 12:00AM
Updated:	Jul 26 2004 12:00AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	MoinMoin MoinMoin 1.2.2 MoinMoin MoinMoin 1.2.1 MoinMoin MoinMoin 1.2 MoinMoin MoinMoin 1.1 MoinMoin MoinMoin 1.0 MoinMoin MoinMoin 0.11 MoinMoin MoinMoin 0.10 MoinMoin MoinMoin 0.9 MoinMoin MoinMoin 0.8 MoinMoin MoinMoin 0.7 MoinMoin MoinMoin 0.3 MoinMoin MoinMoin 0.2 MoinMoin MoinMoin 0.1

Not Vulnerable:	MoinMoin MoinMoin 1.2.3

Discussion

MoinMoin Unspecified Privilege Escalation Vulnerability

MoinMoin is reported prone to an unspecified privilege escalation vulnerability. It is reported that this issue presents itself if access control lists are not applied. An unspecified erroneous function allows remote attackers to carry out privileged tasks without proper access validation. Remote attackers may gain read and write access to sensitive data.

Due to a lack of details, further information is not available at the moment. This BID will be updated as more information becomes available.

This issues is identified in MoinMoin versions 1.2.2 and prior.

Exploit / POC

MoinMoin Unspecified Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

MoinMoin Unspecified Privilege Escalation Vulnerability

Solution:
The vendor has released MoinMoin version 1.2.3 to address this issue.

Gentoo has released an advisory (GLSA 200408-25) to address issues in MoinMoin. Please see the referenced advisory for more information. Gentoo users can carry out the following commands to update their computers:

emerge sync
emerge -pv ">=net-ww/moinmoin-1.2.3"
emerge ">=net-ww/moinmoin-1.2.3"

MoinMoin MoinMoin 0.1