CVE-2010-0668

Publication date 26 February 2010

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured.

Read the notes from the security team

Status

Package Ubuntu Release Status
moin 9.10 karmic
Fixed in 1.8.4-1ubuntu1.1
9.04 jaunty
Fixed in 1.8.2-2ubuntu2.2
8.10 intrepid
Fixed in 1.7.1-1ubuntu1.3
8.04 LTS hardy
Fixed in 1.5.8-5.1ubuntu2.3
6.06 LTS dapper
Fixed in 1.5.2-1ubuntu2.5

Notes

jdstrand

upstream plans to backport to 1.7 and 1.8 only. Patches for 8.04 LTS and 6.06 LTS need a lot of work since the 1.7 patches don't apply.

References

Related Ubuntu Security Notices (USN)

    • USN-911-1
    • MoinMoin vulnerabilities
    • 11 March 2010

Other references

Access our resources on patching vulnerabilities