CVE-2010-0717

Publication date 26 February 2010

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors.

Read the notes from the security team

Status

Package Ubuntu Release Status
moin 9.10 karmic
Fixed in 1.8.4-1ubuntu1.1
9.04 jaunty
Fixed in 1.8.2-2ubuntu2.2
8.10 intrepid
Fixed in 1.7.1-1ubuntu1.3
8.04 LTS hardy
Fixed in 1.5.8-5.1ubuntu2.3
6.06 LTS dapper
Fixed in 1.5.2-1ubuntu2.5

Notes

jdstrand

per upstream, this is fixed via the CVE-2010-0668 patchset

References

Related Ubuntu Security Notices (USN)

    • USN-911-1
    • MoinMoin vulnerabilities
    • 11 March 2010

Other references

Access our resources on patching vulnerabilities