Severity
Severity not reported.
Affected versions
No affected versions listed.
Description
The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.
References
- Advisorysecunia.com/advisories/27435 ↗
- Advisorysecunia.com/advisories/27597 ↗
- Advisorysecunia.com/advisories/31961 ↗
- Advisorywww.vupen.com/english/advisories/2007/3660 ↗
- Advisorywww.vupen.com/english/advisories/2007/3661 ↗
- Fixsecunia.com/advisories/27435 ↗
- Fixwww.debian.org/security/2008/dsa-1640 ↗
- Fixwww.djangoproject.com/weblog/2007/oct/26/security-fix ↗
- Websourceforge.net/forum/forum.php?forum_id=749199 ↗
- Webwww.securityfocus.com/bid/26227 ↗
- Webexchange.xforce.ibmcloud.com/vulnerabilities/38143 ↗
- Webwww.redhat.com/archives/fedora-package-announce/2007-November/msg00243.html ↗
- Webwww.redhat.com/archives/fedora-package-announce/2007-November/msg00257.html ↗