Lucene search

MitreCVE-2009-2944

HistoryAug 31, 2009 - 8:30 p.m.

CVE-2009-2944

2009-08-3120:30:00

mitre

web.nvd.nist.gov

cve-2009-2944

incomplete blacklist vulnerability

teximg plugin

ikiwiki

arbitrary file read

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.005

Percentile

76.9%

JSON

Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands.

Affected configurations

Nvd

Node

ikiwikiikiwikiRange≤3.141592

ikiwikiikiwikiMatch2.0

ikiwikiikiwikiMatch2.00

ikiwikiikiwikiMatch2.1

ikiwikiikiwikiMatch2.2

ikiwikiikiwikiMatch2.3

ikiwikiikiwikiMatch2.4

ikiwikiikiwikiMatch2.5

ikiwikiikiwikiMatch2.6

ikiwikiikiwikiMatch2.6.1

ikiwikiikiwikiMatch2.7

ikiwikiikiwikiMatch2.8

ikiwikiikiwikiMatch2.9

ikiwikiikiwikiMatch2.10

ikiwikiikiwikiMatch2.11

ikiwikiikiwikiMatch2.12

ikiwikiikiwikiMatch2.13

ikiwikiikiwikiMatch2.14

ikiwikiikiwikiMatch2.15

ikiwikiikiwikiMatch2.16

ikiwikiikiwikiMatch2.17

ikiwikiikiwikiMatch2.18

ikiwikiikiwikiMatch2.19

ikiwikiikiwikiMatch2.20

ikiwikiikiwikiMatch2.30

ikiwikiikiwikiMatch2.31

ikiwikiikiwikiMatch2.31.1

ikiwikiikiwikiMatch2.31.2

ikiwikiikiwikiMatch2.31.3

ikiwikiikiwikiMatch2.40

ikiwikiikiwikiMatch2.41

ikiwikiikiwikiMatch2.42

ikiwikiikiwikiMatch2.43

ikiwikiikiwikiMatch2.44

ikiwikiikiwikiMatch2.45

ikiwikiikiwikiMatch2.46

ikiwikiikiwikiMatch2.47

ikiwikiikiwikiMatch2.48

ikiwikiikiwikiMatch2.49

ikiwikiikiwikiMatch2.50

ikiwikiikiwikiMatch2.51

ikiwikiikiwikiMatch2.52

ikiwikiikiwikiMatch2.53

ikiwikiikiwikiMatch2.54

ikiwikiikiwikiMatch2.55

ikiwikiikiwikiMatch2.56

ikiwikiikiwikiMatch2.60

ikiwikiikiwikiMatch2.61

ikiwikiikiwikiMatch2.62

ikiwikiikiwikiMatch2.62.1

ikiwikiikiwikiMatch2.63

ikiwikiikiwikiMatch2.64

ikiwikiikiwikiMatch2.65

ikiwikiikiwikiMatch2.66

ikiwikiikiwikiMatch2.67

ikiwikiikiwikiMatch2.68

ikiwikiikiwikiMatch2.69

ikiwikiikiwikiMatch2.70

ikiwikiikiwikiMatch2.71

ikiwikiikiwikiMatch2.72

ikiwikiikiwikiMatch3.0

ikiwikiikiwikiMatch3.00

ikiwikiikiwikiMatch3.01

ikiwikiikiwikiMatch3.02

ikiwikiikiwikiMatch3.03

ikiwikiikiwikiMatch3.04

ikiwikiikiwikiMatch3.06

ikiwikiikiwikiMatch3.07

ikiwikiikiwikiMatch3.08

ikiwikiikiwikiMatch3.09

ikiwikiikiwikiMatch3.10

ikiwikiikiwikiMatch3.11

ikiwikiikiwikiMatch3.12

ikiwikiikiwikiMatch3.13

ikiwikiikiwikiMatch3.14

ikiwikiikiwikiMatch3.141

ikiwikiikiwikiMatch3.1415

ikiwikiikiwikiMatch3.14159

VendorProductVersionCPE
ikiwikiikiwiki*cpe:2.3:a:ikiwiki:ikiwiki:*:*:*:*:*:*:*:*
ikiwikiikiwiki2.0cpe:2.3:a:ikiwiki:ikiwiki:2.0:*:*:*:*:*:*:*
ikiwikiikiwiki2.00cpe:2.3:a:ikiwiki:ikiwiki:2.00:*:*:*:*:*:*:*
ikiwikiikiwiki2.1cpe:2.3:a:ikiwiki:ikiwiki:2.1:*:*:*:*:*:*:*
ikiwikiikiwiki2.2cpe:2.3:a:ikiwiki:ikiwiki:2.2:*:*:*:*:*:*:*
ikiwikiikiwiki2.3cpe:2.3:a:ikiwiki:ikiwiki:2.3:*:*:*:*:*:*:*
ikiwikiikiwiki2.4cpe:2.3:a:ikiwiki:ikiwiki:2.4:*:*:*:*:*:*:*
ikiwikiikiwiki2.5cpe:2.3:a:ikiwiki:ikiwiki:2.5:*:*:*:*:*:*:*
ikiwikiikiwiki2.6cpe:2.3:a:ikiwiki:ikiwiki:2.6:*:*:*:*:*:*:*
ikiwikiikiwiki2.6.1cpe:2.3:a:ikiwiki:ikiwiki:2.6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ikiwiki	ikiwiki	*	cpe:2.3:a:ikiwiki:ikiwiki::::::::
ikiwiki	ikiwiki	2.0	cpe:2.3:a:ikiwiki:ikiwiki:2.0:::::::*
ikiwiki	ikiwiki	2.00	cpe:2.3:a:ikiwiki:ikiwiki:2.00:::::::*
ikiwiki	ikiwiki	2.1	cpe:2.3:a:ikiwiki:ikiwiki:2.1:::::::*
ikiwiki	ikiwiki	2.2	cpe:2.3:a:ikiwiki:ikiwiki:2.2:::::::*
ikiwiki	ikiwiki	2.3	cpe:2.3:a:ikiwiki:ikiwiki:2.3:::::::*
ikiwiki	ikiwiki	2.4	cpe:2.3:a:ikiwiki:ikiwiki:2.4:::::::*
ikiwiki	ikiwiki	2.5	cpe:2.3:a:ikiwiki:ikiwiki:2.5:::::::*
ikiwiki	ikiwiki	2.6	cpe:2.3:a:ikiwiki:ikiwiki:2.6:::::::*
ikiwiki	ikiwiki	2.6.1	cpe:2.3:a:ikiwiki:ikiwiki:2.6.1:::::::*