« Volver al listado

CVE-2006-3379

Estado: ModificadaMedia (5)—

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service (CPU consumption) by performing a diff between large, crafted pages that trigger the worst case.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Hiki Wiki — Hiki Wiki

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-3379",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-07-06T20:05:00.000",
  "references": [
    {
      "url": "http://hikiwiki.org/en/advisory20060703.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://jvn.jp/jp/JVN%2398836916/index.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/20741",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/21150",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2006/dsa-1119",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/26970",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/18785",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/2643",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27507",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://hikiwiki.org/en/advisory20060703.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvn.jp/jp/JVN%2398836916/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/20741",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/21150",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2006/dsa-1119",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/26970",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/18785",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/2643",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27507",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service (CPU consumption) by performing a diff between large, crafted pages that trigger the worst case."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de complejidad algorítmica en Hiki Wiki v0.6.0 hasta v0.6.5 y v0.8.0 hasta v0.8.5 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) mediante la realización de un diff entre  páginas grandes manipuladas que disparan el peor caso."
    }
  ],
  "lastModified": "2026-06-16T22:26:56.953",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54F63A0C-E0EF-4574-916E-15C3E7B3CD99"
            },
            {
              "criteria": "cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9CEAB59-1B9B-442E-B000-6E4B842EC9A1"
            },
            {
              "criteria": "cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "859F6DB8-9A45-420D-8426-2E06EF1A6D6D"
            },
            {
              "criteria": "cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5DF943E-2F0E-421E-85A1-C8D8B0141F81"
            },
            {
              "criteria": "cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F86D2CEE-9666-4B26-A85B-239DECDEEAD9"
            },
            {
              "criteria": "cpe:2.3:a:hiki_wiki:hiki_wiki:0.6.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3798F776-8461-49B3-BD4F-FF1E81C65895"
            },
            {
              "criteria": "cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A34AFA2-5A70-4548-B067-6C8EE8D5AEDF"
            },
            {
              "criteria": "cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43197C15-7844-4C6B-9215-421C0B59F229"
            },
            {
              "criteria": "cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "117A6B8E-5962-42F1-BCB0-20A8494FB302"
            },
            {
              "criteria": "cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "618510DE-A929-482C-89D2-1FA17A8DE587"
            },
            {
              "criteria": "cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A30A25F8-84FB-4677-9AE9-398DB408AC14"
            },
            {
              "criteria": "cpe:2.3:a:hiki_wiki:hiki_wiki:0.8.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A64ECAB6-1B36-41F5-A7C4-F477416F8DF1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}