[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <Pine.GSO.4.51.0804201313220.25074@faron.mitre.org>
Date: Sun, 20 Apr 2008 13:13:43 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: Florian Weimer <fw@...eb.enyo.de>
cc: oss-security@...ts.openwall.com, coley@...us.mitre.org
Subject: Re: CSRF vulnerability in ikiwiki
On Sun, 20 Apr 2008, Florian Weimer wrote:
> Nevermind, I got CVE-2008-0165 from Debian's pool.
updated.
- Steve
======================================================
Name: CVE-2008-0165
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0165
Reference: CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475445
Cross-site request forgery (CSRF) vulnerability in ikiwiki 2.42 and
earlier allows remote attackers to modify user preferences, including
passwords, via the (1) preferences and (2) edit forms.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
