CVE-2010-0717

Publication date 26 February 2010

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
moin 9.10 karmic
Fixed 1.8.4-1ubuntu1.1
9.04 jaunty
Fixed 1.8.2-2ubuntu2.2
8.10 intrepid
Fixed 1.7.1-1ubuntu1.3
8.04 LTS hardy
Fixed 1.5.8-5.1ubuntu2.3
6.06 LTS dapper
Fixed 1.5.2-1ubuntu2.5

Notes

jdstrand

per upstream, this is fixed via the CVE-2010-0668 patchset

References

Related Ubuntu Security Notices (USN)

    • USN-911-1
    • MoinMoin vulnerabilities
    • 11 March 2010

Other references