Vulnerabilities > CVE-2004-1462 - Unspecified vulnerability in Moinmoin

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
moinmoin
nessus
NVD
Published: 2004-12-31
Updated: 2024-11-20

Summary

Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as (1) revert and (2) delete.

Vulnerable Configurations

Part Description Count
Application
Moinmoin
13

Nessus

  • NASL familyFreeBSD Local Security Checks
    NASL idFREEBSD_PKG_1ECF4CA1F7AD11D896C900061BC2AD93.NASL
    descriptionThe moinmoin package contains two bugs with ACLs and anonymous users. Both bugs may permit anonymous users to gain access to administrative functions; for example the delete function. There is no known workaround, the vulnerability exists regardless if a site is using ACLs or not.
    last seen2020-06-01
    modified2020-06-02
    plugin id38135
    published2009-04-23
    reporterThis script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/38135
    titleFreeBSD : moinmoin -- ACL group bypass (1ecf4ca1-f7ad-11d8-96c9-00061bc2ad93)
  • NASL familyFreeBSD Local Security Checks
    NASL idFREEBSD_MOINMOIN_123.NASL
    descriptionThe following package needs to be updated: moinmoin
    last seen2016-09-26
    modified2011-10-03
    plugin id14385
    published2004-08-27
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=14385
    titleFreeBSD : moinmoin -- ACL group bypass (115)
  • NASL familyGentoo Local Security Checks
    NASL idGENTOO_GLSA-200408-25.NASL
    descriptionThe remote host is affected by the vulnerability described in GLSA-200408-25 (MoinMoin: Group ACL bypass) MoinMoin contains two unspecified bugs, one allowing anonymous users elevated access when not using ACLs, and the other in the ACL handling in the PageEditor. Impact : Restrictions on anonymous users were not properly enforced. This could lead to unauthorized users gaining administrative access to functions such as
    last seen2020-06-01
    modified2020-06-02
    plugin id14581
    published2004-08-30
    reporterThis script is Copyright (C) 2004-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/14581
    titleGLSA-200408-25 : MoinMoin: Group ACL bypass

References