CVE-2006-4679: Medium severity Andreas Gohr Dokuwiki vulnerability
Published Sep 11, 2006
·Updated
DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive information by calling doku.php with the X-DOKUWIKI-DO HTTP header set to "debug".
Affected Software
27 affected components
Andreas Gohr Dokuwiki=release_2004-07-07
Andreas Gohr Dokuwiki=release_2004-08-08
Andreas Gohr Dokuwiki=release_2005-02-06
Andreas Gohr Dokuwiki=release_2005-01-16a
Andreas Gohr Dokuwiki=release_2004-09-12
Andreas Gohr Dokuwiki=release_2005-05-07
Andreas Gohr Dokuwiki=release_2004-07-25
Andreas Gohr Dokuwiki=release_2004-08-22
Andreas Gohr Dokuwiki=release_2004-09-25
Andreas Gohr Dokuwiki=release_2005-02-18
Andreas Gohr Dokuwiki<=release_2006-03-09
Andreas Gohr Dokuwiki=release_2005-09-22
Andreas Gohr Dokuwiki=release_2004-11-10
Andreas Gohr Dokuwiki=release_2005-01-15
Andreas Gohr Dokuwiki=release_2005-01-14
Andreas Gohr Dokuwiki=release_2004-07-04
Andreas Gohr Dokuwiki=release_2005-07-01
Andreas Gohr Dokuwiki=release_2004-07-21
Andreas Gohr Dokuwiki=release_2006-03-05
Andreas Gohr Dokuwiki=release_2005-07-13
Andreas Gohr Dokuwiki=release_2004-09-30
Andreas Gohr Dokuwiki=release_2004-08-15a
Andreas Gohr Dokuwiki=release_2004-10-19
Andreas Gohr Dokuwiki=release_2005-09-19
Andreas Gohr Dokuwiki=release_2004-11-01
Andreas Gohr Dokuwiki=release_2004-07-12
Andreas Gohr Dokuwiki=release_2004-11-02
Event History
Sep 11, 2006
CVE Published
05:04 PM
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-4679?
CVE-2006-4679 has a medium severity rating as it allows attackers to obtain sensitive information through the debug feature.
2
How do I fix CVE-2006-4679?
To fix CVE-2006-4679, disable the debug feature in DokuWiki configurations or upgrade to a version released after 2006-03-09.
3
Which versions of DokuWiki are affected by CVE-2006-4679?
DokuWiki versions before 2006-03-09 are affected by CVE-2006-4679.
4
How does CVE-2006-4679 affect DokuWiki installations?
CVE-2006-4679 enables remote attackers to access sensitive debugging information, potentially exposing security vulnerabilities.
5
Who is impacted by CVE-2006-4679?
Any user or organization utilizing DokuWiki versions prior to 2006-03-09 is at risk from CVE-2006-4679.