CVE-2006-1387

Publication date 26 March 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory consumption) via INCLUDE by URL statements that form a loop, such as a page that includes itself.

Status

Package Ubuntu Release Status
twiki 9.10 karmic
Fixed 4.0.5-9.1ubuntu1
9.04 jaunty
Fixed 4.0.5-9.1ubuntu1
8.10 intrepid
Fixed 4.0.5-9.1ubuntu1
8.04 LTS hardy
Fixed 4.0.5-9.1ubuntu1
7.10 gutsy
Fixed 4.0.5-9.1ubuntu1
7.04 feisty
Fixed 4.0.5-9.1ubuntu1
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life

References

Other references

Access our resources on patching vulnerabilities