CVE-2009-4762

Executive Summary

Informations
Name	CVE-2009-4762	First vendor Publication	2010-03-29
Vendor	Cve	Last vendor Modification	2010-05-27

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4762

CWE : Common Weakness Enumeration

id	Name
CWE-264	Permissions, Privileges, and Access Controls

CPE : Common Platform Enumeration

Type	Description	Count
Application	Moinmo Moinmoin cpe:/a:moinmo:moinmoin:1.8.2 cpe:/a:moinmo:moinmoin:1.8.1 cpe:/a:moinmo:moinmoin:1.8.0 cpe:/a:moinmo:moinmoin:1.7.2 cpe:/a:moinmo:moinmoin:1.7.1 cpe:/a:moinmo:moinmoin:1.7.0	6

Open Source Vulnerability Database (OSVDB)

id	Description
54967	MoinMoin Hierarchical ACL Handling Weakness Sub-pages Restriction Bypass

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/35277
CONFIRM	http://hg.moinmo.in/moin/1.7/rev/897cdbe9e8f2 http://hg.moinmo.in/moin/1.8/rev/897cdbe9e8f2 http://moinmo.in/SecurityFixes
DEBIAN	http://www.debian.org/security/2010/dsa-2014
SECUNIA	http://secunia.com/advisories/39887
UBUNTU	http://ubuntu.com/usn/usn-941-1
VUPEN	http://www.vupen.com/english/advisories/2010/0600 http://www.vupen.com/english/advisories/2010/1208