RETIRED: MoinMoin 'moinmelt.py' Arbitrary Command Execution Vulnerability

Bugtraq ID:	59728
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 08 2013 12:00AM
Updated:	May 13 2013 07:52AM
Credit:	HTP
Vulnerable:
Not Vulnerable:

RETIRED: MoinMoin 'moinmelt.py' Arbitrary Command Execution Vulnerability

MoinMoin is prone to a remote arbitrary command-execution vulnerability.

An attacker can exploit this issue to execute arbitrary commands within the context of the vulnerable application.

Note: This BID is being retired as a duplicate of the issue discussed in BID 57082 (MoinMoin CVE-2012-6081 Multiple Arbitrary Code Execution Vulnerabilities)

MoinMoin 'moinmelt.py' Arbitrary Command Execution Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/59728.py.txt

RETIRED: MoinMoin 'moinmelt.py' Arbitrary Command Execution Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: MoinMoin 'moinmelt.py' Arbitrary Command Execution Vulnerability

References:

• MoinMoin Homepage (MoinMoin)