Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2007-5712
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-5712

Description:
The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/38143

SAID
  Secunia Advisory: SA31961
  Secunia Advisory: SA27435
  Secunia Advisory: SA27597

FEDORA

DEBIAN
  http://www.debian.org/security/2008/dsa-1640

CONFIRM
  http://sourceforge.net/forum/forum.php?forum_id=749199
  http://www.djangoproject.com/weblog/2007/oct/26/security-fix

BID
  26227


Return to the previous page.