CVE-2006-3379

MEDIUM 5.0CVE-2006-3379 · Published 06/07/2006 · updated 16/06/2026

In short

CVE-2006-3379 is a MEDIUM (CVSS 5.0) vulnerability affecting hiki wiki (hiki wiki).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
hiki wiki hiki_wiki	`= 0.6.0= 0.6.1= 0.6.2= 0.6.3= 0.6.4= 0.6.5= 0.8.0= 0.8.1= 0.8.2= 0.8.3= 0.8.4= 0.8.5`	No fix yet

Description

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service (CPU consumption) by performing a diff between large, crafted pages that trigger the worst case.

References

hikiwiki.org/en/advisory20060703.html · Patch
jvn.jp/jp/JVN%2398836916/index.html
secunia.com/advisories/20741 · Patch
secunia.com/advisories/21150
debian.org/security/2006/dsa-1119
osvdb.org/26970
securityfocus.com/bid/18785
vupen.com/english/advisories/2006/2643
exchange.xforce.ibmcloud.com/vulnerabilities/27507

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free