CVE-2008-0169
First published: Tue Jun 03 2008(Updated: )
Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and login to any account for which an OpenID identity is configured and a password is not configured, by specifying an empty password during the login sequence.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ikiwiki Ikiwiki | =2.8 | |
| Ikiwiki Ikiwiki | =1.5 | |
| Ikiwiki Ikiwiki | =1.47 | |
| Ikiwiki Ikiwiki | =1.43 | |
| Ikiwiki Ikiwiki | =1.41 | |
| Ikiwiki Ikiwiki | =1.34.2 | |
| Ikiwiki Ikiwiki | =2.14 | |
| Ikiwiki Ikiwiki | =1.39 | |
| Ikiwiki Ikiwiki | =2.40 | |
| Ikiwiki Ikiwiki | =2.12 | |
| Ikiwiki Ikiwiki | =1.51 | |
| Ikiwiki Ikiwiki | =1.36 | |
| Ikiwiki Ikiwiki | =2.31 | |
| Ikiwiki Ikiwiki | =2.42 | |
| Ikiwiki Ikiwiki | =2.0 | |
| Ikiwiki Ikiwiki | =2.3 | |
| Ikiwiki Ikiwiki | =1.34 | |
| Ikiwiki Ikiwiki | =2.47 | |
| Ikiwiki Ikiwiki | =2.7 | |
| Ikiwiki Ikiwiki | =1.40 | |
| Ikiwiki Ikiwiki | =2.17 | |
| Ikiwiki Ikiwiki | =2.31.2 | |
| Ikiwiki Ikiwiki | =2.41 | |
| Ikiwiki Ikiwiki | =2.6 | |
| Ikiwiki Ikiwiki | =1.44 | |
| Ikiwiki Ikiwiki | =1.49 | |
| Ikiwiki Ikiwiki | =1.38 | |
| Ikiwiki Ikiwiki | =2.2 | |
| Ikiwiki Ikiwiki | =1.45 | |
| Ikiwiki Ikiwiki | =1.35 | |
| Ikiwiki Ikiwiki | =2.5 | |
| Ikiwiki Ikiwiki | =2.31.3 | |
| Ikiwiki Ikiwiki | =2.31.1 | |
| Ikiwiki Ikiwiki | =2.9 | |
| Ikiwiki Ikiwiki | =2.18 | |
| Ikiwiki Ikiwiki | =2.15 | |
| Ikiwiki Ikiwiki | =1.46 | |
| Ikiwiki Ikiwiki | =2.11 | |
| Ikiwiki Ikiwiki | =1.34.1 | |
| Ikiwiki Ikiwiki | =2.30 | |
| Ikiwiki Ikiwiki | =1.42 | |
| Ikiwiki Ikiwiki | =1.48 | |
| Ikiwiki Ikiwiki | =2.1 | |
| Ikiwiki Ikiwiki | =2.19 | |
| Ikiwiki Ikiwiki | =2.44 | |
| Ikiwiki Ikiwiki | =2.4 | |
| Ikiwiki Ikiwiki | =2.16 | |
| Ikiwiki Ikiwiki | =2.13 | |
| Ikiwiki Ikiwiki | =2.43 | |
| Ikiwiki Ikiwiki | =2.20 | |
| Ikiwiki Ikiwiki | =2.10 | |
| Ikiwiki Ikiwiki | =1.37 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2008/05/31/3
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=483770
- http://ikiwiki.info/news/version_2.48/index.html
- http://secunia.com/advisories/30468
- http://ikiwiki.info/security/#index33h2
- http://www.securityfocus.com/bid/29479
- http://www.vupen.com/english/advisories/2008/1710
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42798
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/first-publish-date
- agent/softwarecombine
- agent/description
- agent/event
- agent/type
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ikiwiki
- canonical/ikiwiki ikiwiki
- version/ikiwiki ikiwiki/2.8
- version/ikiwiki ikiwiki/1.5
- version/ikiwiki ikiwiki/1.47
- version/ikiwiki ikiwiki/1.43
- version/ikiwiki ikiwiki/1.41
- version/ikiwiki ikiwiki/1.34.2
- version/ikiwiki ikiwiki/2.14
- version/ikiwiki ikiwiki/1.39
- version/ikiwiki ikiwiki/2.40
- version/ikiwiki ikiwiki/2.12
- version/ikiwiki ikiwiki/1.51
- version/ikiwiki ikiwiki/1.36
- version/ikiwiki ikiwiki/2.31
- version/ikiwiki ikiwiki/2.42
- version/ikiwiki ikiwiki/2.0
- version/ikiwiki ikiwiki/2.3
- version/ikiwiki ikiwiki/1.34
- version/ikiwiki ikiwiki/2.47
- version/ikiwiki ikiwiki/2.7
- version/ikiwiki ikiwiki/1.40
- version/ikiwiki ikiwiki/2.17
- version/ikiwiki ikiwiki/2.31.2
- version/ikiwiki ikiwiki/2.41
- version/ikiwiki ikiwiki/2.6
- version/ikiwiki ikiwiki/1.44
- version/ikiwiki ikiwiki/1.49
- version/ikiwiki ikiwiki/1.38
- version/ikiwiki ikiwiki/2.2
- version/ikiwiki ikiwiki/1.45
- version/ikiwiki ikiwiki/1.35
- version/ikiwiki ikiwiki/2.5
- version/ikiwiki ikiwiki/2.31.3
- version/ikiwiki ikiwiki/2.31.1
- version/ikiwiki ikiwiki/2.9
- version/ikiwiki ikiwiki/2.18
- version/ikiwiki ikiwiki/2.15
- version/ikiwiki ikiwiki/1.46
- version/ikiwiki ikiwiki/2.11
- version/ikiwiki ikiwiki/1.34.1
- version/ikiwiki ikiwiki/2.30
- version/ikiwiki ikiwiki/1.42
- version/ikiwiki ikiwiki/1.48
- version/ikiwiki ikiwiki/2.1
- version/ikiwiki ikiwiki/2.19
- version/ikiwiki ikiwiki/2.44
- version/ikiwiki ikiwiki/2.4
- version/ikiwiki ikiwiki/2.16
- version/ikiwiki ikiwiki/2.13
- version/ikiwiki ikiwiki/2.43
- version/ikiwiki ikiwiki/2.20
- version/ikiwiki ikiwiki/2.10
- version/ikiwiki ikiwiki/1.37