The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption) via a long password which is then hashed.

python-django was updated to version 1.5.5 :

  + Readdressed denial-of-service via password hashers     (CVE-2013-1443)

  + Properly rotate CSRF token on login

This python-django update fixes several security issues.

  - Update to version 1.4.8 (bnc#840832, CVE-2013-1443) :

  + Fixed denial-of-service via large passwords

  - Changes from version 1.4.7 :

  + Fixed directory traversal with ssi template tag

  - Changes from version 1.4.6 :

  + Fixed Cross-site scripting (XSS) in admin interface

  + Fixed Possible XSS via is_safe_url

Fixes CVE-2013-1443

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that Django incorrectly handled large passwords. A remote attacker could use this issue to consume resources, resulting in a denial of service. (CVE-2013-1443)

It was discovered that Django incorrectly handled ssi templates. An attacker could use this issue to read arbitrary files. (CVE-2013-4315)

It was discovered that the Django is_safe_url utility function did not restrict redirects to certain schemes. An attacker could possibly use this issue to perform a cross-site scripting attack.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

fix CVE-2013-1443 Fix CVE-2013-413

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

fix CVE-2013-1443 (DoS via large passwords) Fix for CVE-2013-4315 (SSI include issue)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Django project reports :

These releases address a denial-of-service attack against Django's authentication framework. All users of Django are encouraged to upgrade immediately.

It was discovered that python-django, a high-level Python web develompent framework, is prone to a denial of service vulnerability via large passwords.

A non-authenticated remote attacker could mount a denial of service by submitting arbitrarily large passwords, tying up server resources in the expensive computation of the corresponding hashes to verify the password.

ID	Name	Product	Family	Severity
75200	openSUSE Security Update : python-django (openSUSE-SU-2013:1685-1)	Nessus	SuSE Local Security Checks	medium
75152	openSUSE Security Update : python-django (openSUSE-SU-2013:1492-1)	Nessus	SuSE Local Security Checks	medium
70154	Fedora 20 : python-django-1.5.4-1.fc20 (2013-16938)	Nessus	Fedora Local Security Checks	medium
70117	Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : python-django vulnerabilities (USN-1967-1)	Nessus	Ubuntu Local Security Checks	medium
70108	Fedora 19 : python-django-1.5.4-1.fc19 (2013-16901)	Nessus	Fedora Local Security Checks	medium
70107	Fedora 19 : python-django14-1.4.8-1.fc19 (2013-16899)	Nessus	Fedora Local Security Checks	medium
70066	FreeBSD : django -- denial-of-service via large passwords (05dc6efa-2370-11e3-95b7-00e0814cab4e)	Nessus	FreeBSD Local Security Checks	medium
69938	Debian DSA-2758-1 : python-django - denial of service	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2013-1443

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium