Vulnerability in Moinmo Moinmoin
CVE-2008-6549
The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a denial of service (segmentation fault and crash) via unknown vectors.
EPSS: 0.015 (71.3th percentile) — read the EPSS interpretation.
Affected products
- Moinmo Moinmoin — versions 1.6.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Exploit)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)