CVE-2008-6549

CVE-2008-6549

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service (segmentation fault and crash) via unknown vectors.

CVSS 8.7 · High · EPSS 1.5% · Fix available

Published

2009-03-30T01:00:00.000Z

Updated

2024-09-17T00:46:49.608Z

Stack: python

Check your server →