Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 5:52 a.m.13 views

MoinMoin Denial of Service vulnerability via password_checker function

The passwordchecker function in config/multiconfig.py in MoinMoin prior to version 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service segmentation fault and crash via unknown vectors...

5CVSS7.1AI score0.00543EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2022/05/17 5:52 a.m.10 views

GHSA-WJJC-M3FC-FCM8 MoinMoin Denial of Service vulnerability via password_checker function

The passwordchecker function in config/multiconfig.py in MoinMoin prior to version 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service segmentation fault and crash via unknown vectors...

8.7CVSS6.2AI score0.00543EPSS
Exploits1References5
PyPA
PyPA
added 2009/03/30 1:30 a.m.5 views

PYSEC-2009-12

The passwordchecker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service segmentation fault and crash via unknown vectors...

5CVSS6.8AI score0.00543EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2009/03/30 1:0 a.m.51 views

CVE-2008-6549

CVE-2008-6549 affects MoinMoin 1.6.1 and earlier; the password_checker function in config/multiconfig.py uses cracklib and python-crack, which are not thread-safe, allowing remote attackers to cause a denial of service (segmentation fault and crash) via unknown vectors. Impact is DoS; no exploita...

5CVSS6.7AI score0.00543EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder