Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2008-1937
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-1937

Description:
The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/41909

SAID
  Secunia Advisory: SA29894
  Secunia Advisory: SA30160

GENTOO
  http://security.gentoo.org/glsa/glsa-200805-09.xml

CONFIRM
  http://moinmo.in/SecurityFixes
  http://hg.moinmo.in/moin/1.6/rev/f405012e67af

BID
  28869


Return to the previous page.