Home / vulnerabilities Secunia Security Advisory 50021
Posted on 01 August 2012
Source : packetstormsecurity.org Link
----------------------------------------------------------------------
We are millions! Join us to protect all Pc's Worldwide.
Download the new Secunia PSI 3.0 available in 5 languages and share it with your friends:
http://secunia.com/psi
----------------------------------------------------------------------
TITLE:
Django Cross-Site Scripting and Two Denial of Service Vulnerabilities
SECUNIA ADVISORY ID:
SA50021
VERIFY ADVISORY:
Secunia.com
http://secunia.com/advisories/50021/
Customer Area (Credentials Required)
https://ca.secunia.com/?page=viewadvisory&vuln_id=50021
RELEASE DATE:
2012-07-31
DISCUSS ADVISORY:
http://secunia.com/advisories/50021/#comments
AVAILABLE ON SITE AND IN CUSTOMER AREA:
* Last Update
* Popularity
* Comments
* Criticality Level
* Impact
* Where
* Solution Status
* Operating System / Software
* CVE Reference(s)
http://secunia.com/advisories/50021/
ONLY AVAILABLE IN CUSTOMER AREA:
* Authentication Level
* Report Reliability
* Secunia PoC
* Secunia Analysis
* Systems Affected
* Approve Distribution
* Remediation Status
* Secunia CVSS Score
* CVSS
https://ca.secunia.com/?page=viewadvisory&vuln_id=50021
ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:
* AUTOMATED SCANNING
http://secunia.com/vulnerability_scanning/personal/
http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
DESCRIPTION:
Two security issues and a vulnerability have been reported in Django,
which can be exploited by malicious people to conduct cross-site
scripting attacks and cause a DoS (Denial of Service).
1) Input passed to the redirection functionality of the login() or
logout() views within the authentication framework is not properly
sanitised before being returned to the user after redirection to a
"data:" scheme URL. This can be exploited to execute arbitrary HTML
and script code in a user's browser session in context of an affected
site.
2) An error within the validation of images in the ImageField class
when handling the decompression of images can be exploited to consume
memory resources.
3) An error within the calculation of image dimensions in the
ImageFile class can be exploited to consume server resources and
potentially cause the application to stop responding.
The security issues and the vulnerability are reported in versions
1.3 and 1.4. Other versions may also be affected.
SOLUTION:
Apply patches or update to versions 1.3.2 or 1.4.1.
PROVIDED AND/OR DISCOVERED BY:
The vendor credits:
1) An anonymous person
2) A user within a bug report
3) Jeroen Dekkers
ORIGINAL ADVISORY:
https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/
OTHER REFERENCES:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/
DEEP LINKS:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/
EXTENDED DESCRIPTION:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/
EXTENDED SOLUTION:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/
EXPLOIT:
Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/
----------------------------------------------------------------------
About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.
Subscribe:
http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/
Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.
----------------------------------------------------------------------
