CVE-2008-5646 Trac vulnerable to denial of service
Attackers can cause a denial of service in Trac via specific wiki markup, affecting web application availability.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- Available
What is CVE-2008-5646?
CVE-2008-5646 is a high-severity denial of service vulnerability in n/a, published on 17 Dec 2008. It can be exploited over the network.
Official description
Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup."
Which versions are affected by CVE-2008-5646?
3 open source packages ship an affected version, including trac and Trac. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
trac PyPI | All versions | 0.11.2 |
trac PyPI | All versions | 0.11.2 |
Trac PyPI | All versions | 0.11.2 |
Products include Trac Trac.
How do I fix CVE-2008-5646?
Upgrade trac to 0.11.2 or later.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2008-5646 being exploited?
There is no known exploitation of CVE-2008-5646 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2008-5646, GHSA-437p-qw95-wqqr, PYSEC-2008-6.