MoinMoin wiki CVE-2012-6080 Directory Traversal Vulnerability
BID:57076
Info
MoinMoin wiki CVE-2012-6080 Directory Traversal Vulnerability
| Bugtraq ID: | 57076 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-6080 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 29 2012 12:00AM |
| Updated: | May 07 2015 05:17PM |
| Credit: | The vendor reported this issue |
| Vulnerable: |
MoinMoin MoinMoin 1.9.5 MoinMoin MoinMoin 1.9.4 MoinMoin MoinMoin 1.9.3 Gentoo Linux Debian Linux 6.0.5 |
| Not Vulnerable: | |
Discussion
MoinMoin wiki CVE-2012-6080 Directory Traversal Vulnerability
MoinMoin wiki is prone to a directory-traversal vulnerability.
A remote attacker could exploit the vulnerability using directory-traversal characters ('../') to access arbitrary files that contain sensitive information.
MoinMoin wiki versions 1.9.3 through 1.9.5 are vulnerable.
MoinMoin wiki is prone to a directory-traversal vulnerability.
A remote attacker could exploit the vulnerability using directory-traversal characters ('../') to access arbitrary files that contain sensitive information.
MoinMoin wiki versions 1.9.3 through 1.9.5 are vulnerable.
Exploit / POC
MoinMoin wiki CVE-2012-6080 Directory Traversal Vulnerability
An attacker can use readily available tools to exploit this issue.
An attacker can use readily available tools to exploit this issue.
Solution / Fix
MoinMoin wiki CVE-2012-6080 Directory Traversal Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
MoinMoin wiki CVE-2012-6080 Directory Traversal Vulnerability
References:
References:
- MoinMoin Homepage (MoinMoin)