Ubuntu Security Notice (C) 2007-2013 Canonical, Inc. / NASL script (C) 2007-2013 Tenable Network Security, Inc.
The remote Ubuntu host is missing one or more security-related patches.
A flaw was discovered in MoinMoin's error reporting when using the
AttachFile action. By tricking a user into viewing a crafted MoinMoin
MoinMoin user, possibly exposing the user's authentication information
for the domain where MoinMoin was hosted. (CVE-2007-2423)
Flaws were discovered in MoinMoin's ACL handling for calendars and
includes. Unauthorized users would be able to read pages that would
otherwise be unavailable to them.
Update the affected moinmoin-common, python-moinmoin and / or
Risk factor :
Medium / CVSS Base Score : 5.8