Test ID:	1.3.6.1.4.1.25623.1.0.56962
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200606-16 (DokuWiki)
Summary:	The remote host is missing updates announced in;advisory GLSA 200606-16.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200606-16. Vulnerability Insight: A flaw in DokuWiki's spell checker allows for the execution of arbitrary PHP commands, even without proper authentication. Solution: All DokuWiki users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/dokuwiki-20060309-r1' CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2878 BugTraq ID: 18289 http://www.securityfocus.com/bid/18289 Bugtraq: 20060605 Advisory 04/2006: DokuWiki PHP code execution vulnerability in spellchecker (Google Search) http://www.securityfocus.com/archive/1/435989/100/0/threaded http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046602.html http://www.gentoo.org/security/en/glsa/glsa-200606-16.xml http://www.hardened-php.net/advisory_042006.119.html http://www.osvdb.org/25980 http://securitytracker.com/id?1016221 http://secunia.com/advisories/20429 http://secunia.com/advisories/20669 http://www.vupen.com/english/advisories/2006/2142 XForce ISS Database: dokuwiki-spellchecker-code-execution(26913) https://exchange.xforce.ibmcloud.com/vulnerabilities/26913
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.