NVD

Id
37645  
Name
CVE-2013-1443  
Description
The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption) via a long password which is then hashed.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-09-23  
Modified Date
2014-01-27  
Seq
2013-1443  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
191494 37645 CVE-2013-1443 openSUSE-SU-2013:1541  View
191495 37645 CVE-2013-1443 openSUSE-SU-2013:1685  View
191496 37645 CVE-2013-1443 [django-developers] 20130914 Set a reasonable upper bound on password length  View
191497 37645 CVE-2013-1443 DSA-2758  View
191498 37645 CVE-2013-1443 https://www.djangoproject.com/weblog/2013/sep/15/security/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22715 JVNDB-2013-004290 Django の認証フレームワークにおけるサービス運用妨害 (DoS) の脆弱性 Django の認証フレームワーク (django.contrib.auth) には、サービス運用妨害 (CPU 資源の消費) 状態にされる脆弱性が存在します。 CVE-2013-1443 61385 CVE-2013-1443 37645 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004290.html 2013-09-15 2013-11-11 View