ID CVE-2006-3379
Summary Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service (CPU consumption) by performing a diff between large, crafted pages that trigger the worst case.
References
Vulnerable Configurations
  • cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.3:*:*:*:*:*:*:*
    cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.4:*:*:*:*:*:*:*
    cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.5:*:*:*:*:*:*:*
    cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.5:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 20-07-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 18785
confirm http://hikiwiki.org/en/advisory20060703.html
debian DSA-1119
jvn JVN#98836916
osvdb 26970
secunia
  • 20741
  • 21150
vupen ADV-2006-2643
xf hiki-diff-dos(27507)
Last major update 20-07-2017 - 01:32
Published 06-07-2006 - 20:05
Last modified 20-07-2017 - 01:32
Back to Top