CVE

Id
34026  
CVE No.
CVE-2008-3909  
Status
Candidate  
Description
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests.  
Phase
Assigned (20080904)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
371587 34026 CVE-2008-3909 MLIST:[oss-security] 20080903 django CSRF vuln  View
371588 34026 CVE-2008-3909 URL:http://www.openwall.com/lists/oss-security/2008/09/03/4  View
371589 34026 CVE-2008-3909 CONFIRM:http://www.djangoproject.com/weblog/2008/sep/02/security/  View
371590 34026 CVE-2008-3909 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=460966  View
371591 34026 CVE-2008-3909 DEBIAN:DSA-1640  View
371592 34026 CVE-2008-3909 URL:http://www.debian.org/security/2008/dsa-1640  View
371593 34026 CVE-2008-3909 FEDORA:FEDORA-2008-7288  View
371594 34026 CVE-2008-3909 URL:https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00091.html  View
371595 34026 CVE-2008-3909 FEDORA:FEDORA-2008-7672  View
371596 34026 CVE-2008-3909 URL:https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00131.html  View
371597 34026 CVE-2008-3909 OSVDB:47906  View
371598 34026 CVE-2008-3909 URL:http://osvdb.org/47906  View
371599 34026 CVE-2008-3909 SECUNIA:31961  View
371600 34026 CVE-2008-3909 URL:http://secunia.com/advisories/31961  View
371601 34026 CVE-2008-3909 VUPEN:ADV-2008-2533  View
371602 34026 CVE-2008-3909 URL:http://www.vupen.com/english/advisories/2008/2533  View
371603 34026 CVE-2008-3909 SECUNIA:31837  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46500 JVNDB-2008-001810 ClamAV のエラーパスに関連した処理におけるメモリリークの脆弱性 ClamAV の freshclam/manager.c には、エラーパスに関連した処理に不備があるため、メモリリークの脆弱性が存在します。 CVE-2008-3913 34026 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001810.html  View