Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2012-4404 | First vendor Publication | 2012-09-10 |
| Vendor | Cve | Last vendor Modification | 2013-04-19 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:S/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 6 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Medium |
| Cvss Expoit Score | 6.8 | Authentication | Requires single instance |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users with virtual group membership to be treated as a member of the group. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4404 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-264 | Permissions, Privileges, and Access Controls |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:17640 | |||
| Oval ID: | oval:org.mitre.oval:def:17640 | ||
| Title: | USN-1604-1 -- moin vulnerabilities | ||
| Description: | Several security issues were fixed in MoinMoin. | ||
| Family: | unix | Class: | patch |
| Reference(s): | USN-1604-1 CVE-2011-1058 CVE-2012-4404 | Version: | 7 |
| Platform(s): | Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 | Product(s): | moin |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:17914 | |||
| Oval ID: | oval:org.mitre.oval:def:17914 | ||
| Title: | DSA-2538-1 moin - privilege escalation | ||
| Description: | It was discovered that Moin, a Python clone of WikiWiki, incorrectly evaluates ACLs when virtual groups are involved. This may allow certain users to have additional permissions (privilege escalation) or lack expected permissions. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-2538-1 CVE-2012-4404 | Version: | 7 |
| Platform(s): | Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0 | Product(s): | moin |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 5 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-10-12 | Name : Ubuntu Update for moin USN-1604-1 File : nvt/gb_ubuntu_USN_1604_1.nasl |
| 2012-09-22 | Name : Fedora Update for moin FEDORA-2012-13400 File : nvt/gb_fedora_2012_13400_moin_fc16.nasl |
| 2012-09-22 | Name : Fedora Update for moin FEDORA-2012-13408 File : nvt/gb_fedora_2012_13408_moin_fc17.nasl |
| 2012-09-15 | Name : Debian Security Advisory DSA 2538-1 (moin) File : nvt/deb_2538_1.nasl |
| 2012-09-07 | Name : FreeBSD Ports: moinmoin File : nvt/freebsd_moinmoin8.nasl |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2012-10-12 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1604-1.nasl - Type : ACT_GATHER_INFO |
| 2012-09-18 | Name : The remote Fedora host is missing a security update. File : fedora_2012-13400.nasl - Type : ACT_GATHER_INFO |
| 2012-09-18 | Name : The remote Fedora host is missing a security update. File : fedora_2012-13408.nasl - Type : ACT_GATHER_INFO |
| 2012-09-18 | Name : The remote Fedora host is missing a security update. File : fedora_2012-13528.nasl - Type : ACT_GATHER_INFO |
| 2012-09-06 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-2538.nasl - Type : ACT_GATHER_INFO |
| 2012-09-05 | Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_4f99e2eff72511e18bd80022156e8794.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:21:33 |
|
| 2021-04-22 01:25:40 |
|
| 2020-05-23 00:34:37 |
|
| 2016-04-26 22:13:43 |
|
| 2014-02-17 11:13:08 |
|
| 2013-05-10 22:45:24 |
|
| 2013-04-19 13:20:51 |
|
