FreeBSD : django -- multiple vulnerabilities (f01292a0-db3c-11e1-a84b-00e0814cab4e)

Medium Nessus Plugin ID 61375


The remote FreeBSD host is missing one or more security-related updates.


The Django project reports :

Today the Django team is issuing multiple releases -- Django 1.3.2 and Django 1.4.1 -- to remedy security issues reported to us :

- Cross-site scripting in authentication views

- Denial-of-service in image validation

- Denial-of-service via get_image_dimensions()

All users are encouraged to upgrade Django immediately.


Update the affected packages.

See Also

Plugin Details

Severity: Medium

ID: 61375

File Name: freebsd_pkg_f01292a0db3c11e1a84b00e0814cab4e.nasl

Version: $Revision: 1.3 $

Type: local

Published: 2012/08/01

Modified: 2013/06/22

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:py26-django, p-cpe:/a:freebsd:freebsd:py26-django-devel, p-cpe:/a:freebsd:freebsd:py27-django, p-cpe:/a:freebsd:freebsd:py27-django-devel, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 2012/07/31

Vulnerability Publication Date: 2012/07/30

Reference Information

CVE: CVE-2012-3442, CVE-2012-3443, CVE-2012-3444