Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

MoinMoin Group ACL Bypass

Package(s):

moinmoin

CVE #(s):

Created:

July 12, 2004

Updated:

August 26, 2004

Description:

MoinMoin contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when an attacker creates a user with the same name as an administrative group. This flaw may lead to a loss of integrity. See this osvdb entry for additional information.

Alerts:

Gentoo

200407-09

2004-07-11

(Log in to post comments)