Known Issues of TWiki Production Release 01 Dec 2000

Security Alerts

• Security Alert: Secure webserver to prevent script execution of uploaded files (CVE-2006-3336)
  • Fix available in SecurityAlertSecureFileUploads, fixed in TWikiRelease04x00x04
• Security Alert: TWiki history function allows arbitrary shell command execution
  • Fix available in SecurityAlertExecuteCommandsWithRev
• Security Alert: TWiki search function allows arbitrary shell command execution
  • Fix available in SecurityAlertExecuteCommandsWithSearch
• FileAttachmentFilterSecurityAlert:
  • Files with a .php extension attached to a TWiki topic can be executed. This security alert describes how to protect your TWiki installation.

• Note: See other TWikiSecurityAlerts

Major Issues

• None

Minor Issues

• ParserFailsToItalicizeSingleLetter:
  • Single letter words do not get bold , italic by enclosing them in '*' or '_' .

-- PeterThoeny - 25 Mar 2001