| Name | CVE-2010-2058 |
| Description | setup.py in Prewikka 0.9.14 installs prewikka.conf with world-readable permissions, which allows local users to obtain the SQL database password. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| Debian Bugs | 584469 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| prewikka (PTS) | buster | 4.1.5-3 | fixed |
| bullseye | 5.2.0-1 | fixed |
| sid, bookworm | 5.2.0-2 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|
| prewikka | source | (unstable) | 1.0.0-1.1 | low | | 584469 |
Notes
[lenny] - prewikka <no-dsa> (The insecure permissions only apply for a very short timeframe during pkg update)
FEDORA-2009-3761 http://lwn.net/Articles/330642