Multiple remote vulnerabilities MoinMoin v1.80
===============================================================
!vuln
MoinMoin v1.5.9 is prone to multiple remote vulnerabilities.
Earlier versions may also be affected.
MoinMoin v1.80 is also affected to a lesser extent.
Other versions may also be affected.
===============================================================
===============================================================
!dork
Dork: "* MoinMoin Powered * Python Powered * Valid HTML 4.01"
===============================================================
===============================================================
!risk 1 - Denial Of Service
Low
The denial of service only results on the end-users side.
===============================================================
===============================================================
!discussion 1 - Denial Of Service
http://wiki.site.org/%08?action=fullsearch&value=linkto%3A%22%0
8%22&context=180
Changing the URL of a linkto URl results in end-user denial of
service conditions if ASCII characters are injected.
===============================================================
===============================================================
!risk 2 - Full Path Disclosure
Medium
Attackers can use this vulnerability to leverage another attack
after the full path has been disclosed.
===============================================================
===============================================================
!discussion 2 - Full Path Disclosure
http://wiki.site.org/VulnVulnVulnVuln/VulnVulnVuln/Vul.........
A remote user is able to identify several details about the
system from the python traceback error after injecting an
extremely long URL string. The uname -a (the platform and OS),
the python release, the full path of the htdocs folder and
python folder, and the version of MoinMoin that is running.
However, MoinMoin v1.80 does not disclose the python release
and the version of MoinMoin.
===============================================================
===============================================================
!solution
MoinMoin can still be used, but be wary of the full path
disclosure. The vendor has not yet been notified.
===============================================================
===============================================================
!greetz
Greetz go out to the people who know me.
===============================================================
===============================================================
!author
Xia Shing Zee
===============================================================