CVE-2012-4404

security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users with virtual group membership to be treated as a member of the group.

• CWE-264

• http://hg.moinmo.in/moin/1.9/rev/7b9f39289e16
• http://moinmo.in/SecurityFixesVendor Advisory
• http://secunia.com/advisories/50474Vendor Advisory
• http://secunia.com/advisories/50496Vendor Advisory
• http://secunia.com/advisories/50885
• http://www.debian.org/security/2012/dsa-2538
• http://www.openwall.com/lists/oss-security/2012/09/04/4
• http://www.openwall.com/lists/oss-security/2012/09/05/2
• http://www.ubuntu.com/usn/USN-1604-1
• http://hg.moinmo.in/moin/1.9/rev/7b9f39289e16
• http://moinmo.in/SecurityFixesVendor Advisory
• http://secunia.com/advisories/50474Vendor Advisory
• http://secunia.com/advisories/50496Vendor Advisory
• http://secunia.com/advisories/50885
• http://www.debian.org/security/2012/dsa-2538
• http://www.openwall.com/lists/oss-security/2012/09/04/4
• http://www.openwall.com/lists/oss-security/2012/09/05/2
• http://www.ubuntu.com/usn/USN-1604-1

Published

Sep 10, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4398The __request_module function in kernel/kmod.c in the Linux …
• CVE-2012-4399The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before…7.5
• CVE-2012-4400repository/repository_ajax.php in Moodle 2.2.x before 2.2.5 …
• CVE-2012-4401Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remo…
• CVE-2012-4402webservice/lib.php in Moodle 2.1.x before 2.1.8, 2.2.x befor…
• CVE-2012-4403theme/yui_combo.php in Moodle 2.3.x before 2.3.2 does not pr…
• CVE-2012-4405Multiple integer underflows in the icmLut_allocate function …
• CVE-2012-4406OpenStack Object Storage (swift) before 1.7.0 uses the loads…9.8
• CVE-2012-4407lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2…
• CVE-2012-4408course/reset.php in Moodle 2.1.x before 2.1.8, 2.2.x before …
• CVE-2012-4409Stack-based buffer overflow in the check_file_head function …
• CVE-2012-4410Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…