PyPI/moin CVE-2008-6549: unknown, EPSS 1.48%

The password_checker function in config/multiconfig.py in MoinMoin 1.6.1 uses the cracklib and python-crack features even though they are not thread-safe, which allows remote attackers to cause a deni

Action: Upgrade moin to 1.6.1 or later.

pip install moin==1.6.1

Affected

Fixed versions

Sources

• osv: PYSEC-2009-12
• http://hg.moinmo.in/moin/1.6/rev/35ff7a9b1546
• http://moinmo.in/SecurityFixes
• http://osvdb.org/48876

CVE-2008-6549 · published 2009-03-30T01:30:00Z · modified 2024-11-25T22:42:05.365810Z · JSON