5

CVE-2010-4535

The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service (resource consumption) via a URL that specifies a large base36 integer.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Djangoproject ≫ Django Version <= 1.1.2
Djangoproject ≫ Django Version 0.91
Djangoproject ≫ Django Version 0.95
Djangoproject ≫ Django Version 0.95.1
Djangoproject ≫ Django Version 0.96
Djangoproject ≫ Django Version 1.0
Djangoproject ≫ Django Version 1.0.1
Djangoproject ≫ Django Version 1.0.2
Djangoproject ≫ Django Version 1.1
Djangoproject ≫ Django Version 1.1.0
Djangoproject ≫ Django Version 1.2
Djangoproject ≫ Django Version 1.2.1
Djangoproject ≫ Django Version 1.2.2
Djangoproject ≫ Django Version 1.2.3
Djangoproject ≫ Django Version 1.3 Update alpha1
Djangoproject ≫ Django Version 1.3 Update alpha2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.38% 0.875
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053041.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053072.html
http://secunia.com/advisories/42715
Vendor Advisory
http://secunia.com/advisories/42827
http://secunia.com/advisories/42913
http://www.djangoproject.com/weblog/2010/dec/22/security/
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2010/12/23/4
Patch
http://www.openwall.com/lists/oss-security/2011/01/03/5
Patch
http://www.ubuntu.com/usn/USN-1040-1
http://www.vupen.com/english/advisories/2011/0048
http://www.vupen.com/english/advisories/2011/0098
https://bugzilla.redhat.com/show_bug.cgi?id=665373
Patch
http://code.djangoproject.com/changeset/15032
Patch
http://www.securityfocus.com/bid/45563