CVE-2011-4138

Related Files

Ubuntu Security Notice USN-1297-1

Posted Dec 9, 2011

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1297-1 - Pall McMillan discovered that Django used the root namespace when storing cached session data. A remote attacker could exploit this to modify sessions. Paul McMillan discovered that Django would not timeout on arbitrary URLs when the application used URLFields. This could be exploited by a remote attacker to cause a denial of service via resource exhaustion. Various other issues were also addressed.

tags | advisory, remote, denial of service, arbitrary, root

systems | linux, ubuntu

advisories | CVE-2011-4136, CVE-2011-4137, CVE-2011-4138, CVE-2011-4139

SHA-256 | d90812dfe62d74192f723148eedd422416897927518969173061c4a5f2b9bc9c

Download | Favorite | View

Debian Security Advisory 2332-1

Posted Oct 29, 2011

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2332-1 - Paul McMillan, Mozilla and the Django core team discovered several vulnerabilities in Django, a Python web framework.

tags | advisory, web, vulnerability, python

systems | linux, debian

advisories | CVE-2011-4136, CVE-2011-4137, CVE-2011-4138, CVE-2011-4139, CVE-2011-4140

SHA-256 | 58a235a4d66e5650b14ae17e73287994e75b7e79c69339689b8b98c9c34b52a1

Download | Favorite | View