DokuWiki With ImageMagick Remote Command Execution and Denial of Service Vulnerabilities

DokuWiki is prone to these vulnerabilities:

- A denial-of-service issue
- An arbitrary-command-execution issue

These issues present themselves when DocuWiki is configured to use ImageMagick.

The denial-of-service issue allows remote attackers to consume excessive CPU resources, denying service to legitimate users. The command-execution issue allows remote attackers to execute arbitrary shell commands with the privileges of the hosting webserver, facilitating a remote compromise of affected computers.

DokuWiki version 2006-03-09 is vulnerable to these issues; other versions may also be affected.


 

Privacy Statement
Copyright 2010, SecurityFocus