USN-925-1: MoinMoin vulnerabilities Post: 302411451

Sponsored Content

Special Forums Cybersecurity Security Advisories (RSS) USN-925-1: MoinMoin vulnerabilities Post 302411451 by Linux Bot on Thursday 8th of April 2010 01:30:03 PM

04-08-2010

Registered User

USN-925-1: MoinMoin vulnerabilities

Referenced CVEs:
CVE-2010-0828, CVE-2010-1238

Description:
===========================================================Ubuntu Security Notice USN-925-1 April 08, 2010moin vulnerabilitiesCVE-2010-0828, CVE-2010-1238===========================================================A security issue affects the following Ubuntu releases:Ubuntu 6.06 LTSUbuntu 8.04 LTSUbuntu 8.10Ubuntu 9.04Ubuntu 9.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 6.06 LTS: python2.4-moinmoin 1.5.2-1ubuntu2.6Ubuntu 8.04 LTS: python-moinmoin 1.5.8-5.1ubuntu2.4Ubuntu 8.10: python-moinmoin 1.7.1-1ubuntu1.5Ubuntu 9.04: python-moinmoin 1.8.2-2ubuntu2.3Ubuntu 9.10: python-moinmoin 1.8.4-1ubuntu1.2In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:It was discovered that MoinMoin did not properly sanitize its input whenprocessing Despam actions, resulting in cross-site scripting (XSS)vulnerabilities. If a privileged wiki user were tricked into performingthe Despam action on a page with a crafted title, a remote attacker couldexploit this to execute JavaScript code. (CVE-2010-0828)It was discovered that the TextCha protection in MoinMoin could be bypassedby submitting a crafted form request. This issue only affected Ubuntu 8.10.(CVE-2010-1238)

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

LEARN ABOUT DEBIAN

mtp_libmtp_folder_struct

LIBMTP_folder_struct(3) 					      libmtp						   LIBMTP_folder_struct(3)

NAME

       libmtp - LIBMTP_folder_struct

SYNOPSIS

       #include <libmtp.h>

   Data Fields
       uint32_t folder_id
       uint32_t parent_id
       uint32_t storage_id
       char * name
       LIBMTP_folder_t * sibling
       LIBMTP_folder_t * child

Detailed Description
       MTP Folder structure

       Examples:
	   delfile.c, folders.c, getfile.c, newfolder.c, sendfile.c, and sendtr.c.

Field Documentation
   LIBMTP_folder_t* LIBMTP_folder_struct::child
       Child folder or NULL if no children

       Examples:
	   folders.c.

       Referenced by LIBMTP_destroy_folder_t(), LIBMTP_Find_Folder(), and LIBMTP_Get_Folder_List_For_Storage().

   uint32_t LIBMTP_folder_struct::folder_id
       Unique folder ID

       Examples:
	   folders.c.

       Referenced by LIBMTP_Find_Folder(), LIBMTP_Get_Folder_List_For_Storage(), LIBMTP_new_folder_t(), and LIBMTP_Set_Folder_Name().

   char* LIBMTP_folder_struct::name
       Name of folder

       Examples:
	   folders.c.

       Referenced by LIBMTP_destroy_folder_t(), LIBMTP_Get_Folder_List_For_Storage(), and LIBMTP_Set_Folder_Name().

   uint32_t LIBMTP_folder_struct::parent_id
       ID of parent folder

       Referenced by LIBMTP_Get_Folder_List_For_Storage().

   LIBMTP_folder_t* LIBMTP_folder_struct::sibling
       Next folder at same level or NULL if no more

       Examples:
	   folders.c.

       Referenced by LIBMTP_destroy_folder_t(), LIBMTP_Find_Folder(), and LIBMTP_Get_Folder_List_For_Storage().

   uint32_t LIBMTP_folder_struct::storage_id
       ID of storage holding this folder

       Referenced by LIBMTP_Get_Folder_List_For_Storage().

Author
       Generated automatically by Doxygen for libmtp from the source code.

Version 1.1.3							  Sun Feb 17 2013					   LIBMTP_folder_struct(3)