oss-sec mailing list archives

Re: CVE request: MoinMoin Wiki (remote code execution vulnerability)


From: Thomas Waldmann <tw () waldmann-edv de>
Date: Sun, 12 May 2013 17:30:30 +0200

The section 0x06 of http://www.exploit-db.com/papers/25306/ mention a 
exploit for moinmoin, which looks connected with this vulnerability 
http://www.securityfocus.com/bid/59728
Can you please assign a CVE to it?

This is old news (and even the exploit code was out there before this
"publication", one just needed google to find it on some pastebins).
Back in December, CVE-2012-6081 was assigned for that and we fixed it
with the release of MoinMoin 1.9.6, see: https://moinmo.in/SecurityFixes



Current thread: