CVE-2009-2944
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x...
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands.
Exploit likelihood
What each source reports
NVD Score used
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands.
- Record
CVE-2009-2944- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands.
- Record
CVE-2009-2944- Updated
- 2026-11-02
EUVDEUVD-2009-2931 No score
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands.
- Record
EUVD-2009-2931- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x7g4-2h3g-m2w7 No score
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x...
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands.
- Record
GHSA-x7g4-2h3g-m2w7- Updated
- 2026-11-02
OSV No score
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands.
- Record
CVE-2009-2944- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-2944 No score
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands.
- Record
DEBIAN-CVE-2009-2944- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10860-1 No score
ikiwiki-3.20200202.3-2.7 on GA media
These are all security issues fixed in the ikiwiki-3.20200202.3-2.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10860-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ikiwikiDebian:12 |
before 3.1415926 | 3.1415926 |
ikiwikiDebian:13 |
before 3.1415926 | 3.1415926 |
ikiwikiDebian:14 |
before 3.1415926 | 3.1415926 |
ikiwikiDebian:5.0 |
before 2.53.4, plus listed versions 2.53.3 |
2.53.4 |
ikiwikiopenSUSE:Tumbleweed From an advisory covering 14 CVEs |
before 3.20200202.3-2.7 | 3.20200202.3-2.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-2944 is a medium vulnerability (CVSS 5.0) in Ikiwiki, published August 31, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. Fixed in ikiwiki 3.1415926.
References
osvdb.org/57575
ikiwiki.info/security
secunia.com/advisories/36516
debian.org/security/2009/dsa-1875
securityfocus.com/bid/36181
Show 19 moreShow less
vupen.com/english/advisories/2009/2475
exchange.xforce.ibmcloud.com/vulnerabilities/52922
nvd.nist.gov/vuln/detail/CVE-2009-2944
github.com/advisories/GHSA-x7g4-2h3g-m2w7
security-tracker.debian.org/tracker/CVE-2009-2944
suse.com/security/cve/CVE-2008-0169