CVE-2012-6080

Publication date 29 December 2012

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name.

Read the notes from the security team

Status

Package Ubuntu Release Status
moin 12.10 quantal
Fixed 1.9.3-1ubuntu3.1
12.04 LTS precise
Fixed 1.9.3-1ubuntu2.2
11.10 oneiric
Fixed 1.9.3-1ubuntu1.11.10.2
10.04 LTS lucid
Fixed 1.9.2-2ubuntu3.3
8.04 LTS hardy Ignored end of life

Notes

jdstrand

CVE not assigned yet