CVE-2006-6071

Publication date 2 December 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

TWiki 4.0.5 and earlier, when running under Apache 1.3 using ApacheLogin with sessions and "ErrorDocument 401" redirects to a valid wiki topic, does not properly handle failed login attempts, which allows remote attackers to read arbitrary content by cancelling out of a failed authentication with a valid username and invalid password.

Status

Package Ubuntu Release Status
twiki 9.10 karmic
Fixed 4.0.5-9.1ubuntu1
9.04 jaunty
Fixed 4.0.5-9.1ubuntu1
8.10 intrepid
Fixed 4.0.5-9.1ubuntu1
8.04 LTS hardy
Fixed 4.0.5-9.1ubuntu1
7.10 gutsy
Fixed 4.0.5-9.1ubuntu1
7.04 feisty
Fixed 4.0.5-9.1ubuntu1
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life

References

Other references