Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2008-3195

Published: 18 September 2008

Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows remote attackers to read arbitrary files via a query string containing a .. (dot dot) in the image variable, and execute arbitrary files via unspecified vectors.

Notes

AuthorNote
jdstrand
per Debian, access to configure script is restricted to localhost on
Debian

Priority

Low

Status

Package Release Status
twiki
Launchpad, Ubuntu, Debian
dapper Ignored
(end of life)
feisty Ignored
(end of life, was needed)
gutsy Ignored
(end of life, was needed)
hardy Ignored
(end of life)
intrepid Ignored
(end of life, was needed)
jaunty Not vulnerable
(1:4.1.2-5ubuntu1)
karmic Not vulnerable

lucid Does not exist

maverick Does not exist

natty Does not exist

oneiric Does not exist

upstream
Released (4.2.3, 1:4.1.2-5)