PT-2019-6621 · Tikiwiki · Ikiwiki

Ludwig Nussel · Published 2019-10-29 · Updated 2020-08-18 · CVE-2011-1408

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions ikiwiki versions prior to 3.20110608

Description The issue allows remote attackers to hijack root's tty and run symlink attacks.

Recommendations For versions prior to 3.20110608, update to version 3.20110608 or later to resolve the issue.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2011-1408

SNYK-LINUX-IKIWIKI-133098

Affected Products

Ikiwiki

References · 9

• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1408 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-1408 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1408 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-1408 · Vendor Advisory
• https://t.me/cibsecurity/7755 · Telegram Post
• https://ikiwiki.info/security/#index40h2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1408 · Note
• https://tenable.com/plugins/nessus/55157 · Note
• https://snyk.io/vuln/SNYK-LINUX-IKIWIKI-133098 · Note