The remote host is running MoinMoin, a wiki application written in Python.

The version of MoinMoin installed on the remote host fails to validate input to the 'MOIN_ID' cookie before using it to read and write user profiles.  By providing the name of a file that exists on the remote host and is writable by the web server user id, an unauthenticated remote attacker may be able to exploit this issue to corrupt files, possibly even injecting arbitrary PHP code that could later be executed subject to the privileges of the web server user id.

リモートホストは、Pythonで書かれたwikiアプリケーションのMoinMoinを実行しています。

リモートホストにインストールされているMoinMoinのバージョンは、ユーザープロファイルの読み書きに使用される前に、「MOIN_ID」cookieに対する入力の検証に失敗します。リモートホスト上に存在し、WebサーバーユーザーIDによる書き込みが可能なファイルの名前を指定することで、認証されていないリモート攻撃者が、この問題を悪用して、ファイルを破損させたり、WebサーバーユーザーIDの権限に従って後で実行可能な任意のPHPコードを挿入したりする可能性があります。

遠端主機正在執行 MoinMoin，這是一個以 Python 編寫的 wiki 應用程式。

遠端主機上安裝的 MoinMoin 版本無法驗證 'MOIN_ID' cookie 的輸入內容，便將其用於讀取和寫入使用者設定檔。透過提供遠端主機上存在且可由 Web 伺服器使用者識別碼寫入的檔案名稱，未經驗證的遠端攻擊者可惡意利用此問題來損毀檔案，甚至可能插入稍後可執行的任意 PHP 程式碼 (需要 Web 伺服器使用者 id 權限) 。

MoinMoin Security advisory

XSS issue in login action

XSS issue in AttachFile action

XSS issue in RenamePage/DeletePage action

XSS issue in gui editor

The remote host is affected by the vulnerability described in GLSA-200803-27 (MoinMoin: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered:
    A vulnerability exists in the file wikimacro.py because the
    _macro_Getval function does not properly enforce ACLs     (CVE-2008-1099).
    A directory traversal vulnerability exists in the userform action     (CVE-2008-0782).
    A Cross-Site Scripting vulnerability exists in the login action     (CVE-2008-0780).
    Multiple Cross-Site Scripting vulnerabilities exist in the file     action/AttachFile.py when using the message, pagename, and target     filenames (CVE-2008-0781).
    Multiple Cross-Site Scripting vulnerabilities exist in     formatter/text_gedit.py (aka the gui editor formatter) which can be     exploited via a page name or destination page name, which trigger an     injection in the file PageEditor.py (CVE-2008-1098).
  Impact :

    These vulnerabilities can be exploited to allow remote attackers to     inject arbitrary web script or HTML, overwrite arbitrary files, or read     protected pages.
  Workaround :

    There is no known workaround at this time.

Fernando Quintero discovered than MoinMoin did not properly sanitize its input when processing login requests, resulting in cross-site scripting (XSS) vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain. This issue affected Ubuntu 7.10 and 8.04 LTS. (CVE-2008-0780)

Fernando Quintero discovered that MoinMoin did not properly sanitize its input when attaching files, resulting in cross-site scripting vulnerabilities. This issue affected Ubuntu 6.06 LTS, 7.10 and 8.04 LTS. (CVE-2008-0781)

It was discovered that MoinMoin did not properly sanitize its input when processing user forms. A remote attacker could submit crafted cookie values and overwrite arbitrary files via directory traversal.
This issue affected Ubuntu 6.06 LTS, 7.10 and 8.04 LTS.
(CVE-2008-0782)

It was discovered that MoinMoin did not properly sanitize its input when editing pages, resulting in cross-site scripting vulnerabilities.
This issue only affected Ubuntu 6.06 LTS and 7.10. (CVE-2008-1098)

It was discovered that MoinMoin did not properly enforce access controls, which could allow a remoter attacker to view private pages.
This issue only affected Ubuntu 6.06 LTS and 7.10. (CVE-2008-1099)

It was discovered that MoinMoin did not properly sanitize its input when attaching files and using the rename parameter, resulting in cross-site scripting vulnerabilities. (CVE-2009-0260)

It was discovered that MoinMoin did not properly sanitize its input when displaying error messages after processing spam, resulting in cross-site scripting vulnerabilities. (CVE-2009-0312).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several remote vulnerabilities have been discovered in MoinMoin, a Python clone of WikiWiki. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-2423     A cross-site-scripting vulnerability has been discovered     in attachment handling.

  - CVE-2007-2637     Access control lists for calendars and includes were     insufficiently enforced, which could lead to information     disclosure.

  - CVE-2008-0780     A cross-site-scripting vulnerability has been discovered     in the login code.

  - CVE-2008-0781     A cross-site-scripting vulnerability has been discovered     in attachment handling.

  - CVE-2008-0782     A directory traversal vulnerability in cookie handling     could lead to local denial of service by overwriting     files.

  - CVE-2008-1098     Cross-site-scripting vulnerabilities have been     discovered in the GUI editor formatter and the code to     delete pages.

  - CVE-2008-1099     The macro code validates access control lists     insufficiently, which could lead to information     disclosure.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
30055	MoinMoin MOIN_ID Cookie userform Action Traversal Arbitrary File Overwrite	Nessus	CGI abuses	2008/1/24	2022/4/11	high
30055	MoinMoin MOIN_ID Cookie userformアクショントラバーサルの任意のファイル上書き	Nessus	CGI abuses	2008/1/24	2022/4/11	high
30055	MoinMoin MOIN_ID Cookie userform 動作遍歷任意檔案覆寫	Nessus	CGI abuses	2008/1/24	2022/4/11	high
31184	FreeBSD : moinmoin -- multiple vulnerabilities (f113bbeb-e3ac-11dc-bb89-000bcdc1757a)	Nessus	FreeBSD Local Security Checks	2008/2/26	2021/1/6	high
31614	GLSA-200803-27 : MoinMoin: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2008/3/19	2021/1/6	medium
38011	Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : moin vulnerabilities (USN-716-1)	Nessus	Ubuntu Local Security Checks	2009/4/23	2021/1/19	medium
31425	Debian DSA-1514-1 : moin - several vulnerabilities	Nessus	Debian Local Security Checks	2008/3/13	2021/1/4	medium

検出

プラグインの検索

high

high

high

high

medium

medium

medium