CVE

Id
47119  
CVE No.
CVE-2010-4535  
Status
Candidate  
Description
The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service (resource consumption) via a URL that specifies a large base36 integer.  
Phase
Assigned (20101209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
515320 47119 CVE-2010-4535 MLIST:[oss-security] 20101223 CVE Request -- Django 1.2.4, Django 1.1.3 and Django 1.3 beta 1 -- addressing two security flaws  View
515321 47119 CVE-2010-4535 URL:http://www.openwall.com/lists/oss-security/2010/12/23/4  View
515322 47119 CVE-2010-4535 MLIST:[oss-security] 20110103 Re: CVE Request -- Django 1.2.4, Django 1.1.3 and Django 1.3 beta 1 -- addressing two security flaws  View
515323 47119 CVE-2010-4535 URL:http://www.openwall.com/lists/oss-security/2011/01/03/5  View
515324 47119 CVE-2010-4535 CONFIRM:http://code.djangoproject.com/changeset/15032  View
515325 47119 CVE-2010-4535 CONFIRM:http://www.djangoproject.com/weblog/2010/dec/22/security/  View
515326 47119 CVE-2010-4535 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=665373  View
515327 47119 CVE-2010-4535 FEDORA:FEDORA-2011-0096  View
515328 47119 CVE-2010-4535 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053041.html  View
515329 47119 CVE-2010-4535 FEDORA:FEDORA-2011-0120  View
515330 47119 CVE-2010-4535 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053072.html  View
515331 47119 CVE-2010-4535 UBUNTU:USN-1040-1  View
515332 47119 CVE-2010-4535 URL:http://www.ubuntu.com/usn/USN-1040-1  View
515333 47119 CVE-2010-4535 BID:45563  View
515334 47119 CVE-2010-4535 URL:http://www.securityfocus.com/bid/45563  View
515335 47119 CVE-2010-4535 SECUNIA:42715  View
515336 47119 CVE-2010-4535 URL:http://secunia.com/advisories/42715  View
515337 47119 CVE-2010-4535 SECUNIA:42827  View
515338 47119 CVE-2010-4535 URL:http://secunia.com/advisories/42827  View
515339 47119 CVE-2010-4535 SECUNIA:42913  View
515340 47119 CVE-2010-4535 URL:http://secunia.com/advisories/42913  View
515341 47119 CVE-2010-4535 VUPEN:ADV-2011-0048  View
515342 47119 CVE-2010-4535 URL:http://www.vupen.com/english/advisories/2011/0048  View
515343 47119 CVE-2010-4535 VUPEN:ADV-2011-0098  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31034 JVNDB-2011-001273 Apache HTTP Server の repos.c 内にある walk 関数におけるサービス運用妨害 (DoS) の脆弱性 Apache HTTP Server の mod_dav_svn モジュール内にある repos.c の walk 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-4539 47119 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001273.html  View