CVE-2008-6549 MoinMoin Denial of Service vulnerability via password_checker function
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service (segmentation fault and crash) via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi moin(PyPI) | < 1.6.1 | 1.6.1 |
| moinmoin | = 1.6.1 | No fix listed |
| debian/moin(Debian:10) | < 1.6.2-1 | 1.6.2-1 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com product
- github.com
- web.archive.org
- web.archive.org
- hg.moinmo.in exploit
- moinmo.in vendor-advisory
- 48876 vdb-entry
- github.com