Fedora 11 : dokuwiki-0-0.4.20091225.c.fc11 (2010-0770)

high Nessus Plugin ID 47196

Language:

Synopsis

The remote Fedora host is missing a security update.

Description

- Fix CSRF bug Secunia advisory SA38205, dokuwiki bug #1853 http://secunia.com/advisories/38205/3/ - Fix Security ACL bypass bug Secunia advisory SA38183, dokuwiki bug #1847 http://secunia.com/advisories/38183/3/

- Upgrade to the latest upstream - Fix bugzilla bug #556494

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected dokuwiki package.

See Also

https://bugzilla.redhat.com/show_bug.cgi?id=556494

http://www.nessus.org/u?51a5cab3

Plugin Details

Severity: High

ID: 47196

File Name: fedora_2010-0770.nasl

Version: 1.13

Type: local

Agent: unix

Published: 7/1/2010

Updated: 1/11/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.9

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:dokuwiki, cpe:/o:fedoraproject:fedora:11

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 1/19/2010

Reference Information

CVE: CVE-2010-0287, CVE-2010-0288, CVE-2010-0289

BID: 37820

CWE: 22, 264, 352

FEDORA: 2010-0770

Secunia: 38183, 38205