CVE

Id
48610  
CVE No.
CVE-2011-0698  
Status
Candidate  
Description
Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays.  
Phase
Assigned (20110131)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528302 48610 CVE-2011-0698 MLIST:[oss-security] 20110209 Django multiple flaws (CVEs inside)  View
528303 48610 CVE-2011-0698 URL:http://openwall.com/lists/oss-security/2011/02/09/6  View
528304 48610 CVE-2011-0698 CONFIRM:http://www.djangoproject.com/weblog/2011/feb/08/security/  View
528305 48610 CVE-2011-0698 MANDRIVA:MDVSA-2011:031  View
528306 48610 CVE-2011-0698 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:031  View
528307 48610 CVE-2011-0698 BID:46296  View
528308 48610 CVE-2011-0698 URL:http://www.securityfocus.com/bid/46296  View
528309 48610 CVE-2011-0698 SECUNIA:43230  View
528310 48610 CVE-2011-0698 URL:http://secunia.com/advisories/43230  View
528311 48610 CVE-2011-0698 VUPEN:ADV-2011-0372  View
528312 48610 CVE-2011-0698 URL:http://www.vupen.com/english/advisories/2011/0372  View
528313 48610 CVE-2011-0698 VUPEN:ADV-2011-0439  View

Related JVN