PT-2007-3932 · Wikkawiki · Wikkawiki

Publicado 2007-05-11 · Atualizado 2013-08-30 · CVE-2007-2613

Positive Technologies (AI Summary)

CVSS v2.0

8.3

Alta

Vetor base

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WikkaWiki versions prior to 1.1.6.3

Description The issue allows attackers in a shared virtual host server environment to upload and execute an arbitrary configuration file. This is achieved by modifying the WAKKA CONFIG environment variable.

Recommendations For versions prior to 1.1.6.3, update to version 1.1.6.3 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-2613

Produtos afetados

Wikkawiki

Referências · 5

• http://osvdb.org/35825 · Nota
• http://vupen.com/english/advisories/2007/1725 · Nota
• http://wush.net/trac/wikka/ticket/98 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-2613 · Nota de Segurança
• http://wikkawiki.org/WikkaReleaseNotes · Correção