CVE-2010-0667

NameCVE-2010-0667
DescriptionMoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
moinsourceetch(not affected)
moinsourcelenny(not affected)
moinsource(unstable)1.9.1-1

Notes

[lenny] - moin <not-affected> (versions before 1.9 are not affected)
[etch] - moin <not-affected> (versions before 1.9 are not affected)
http://hg.moinmo.in/moin/1.9/rev/9d8e7ce3c3a2
http://hg.moinmo.in/moin/1.9/rev/04afdde50094
http://moinmo.in/MoinMoinChat/Logs/moin-dev/2010-01-18
Search for package or bug name: Reporting problems