CVE-2008-6549

CVE-2008-6549 describes a denial-of-service vulnerability in MoinMoin 1.6.1, specifically within the password_checker function in config/multiconfig.py. This flaw arises because the function improperly utilizes the non-thread-safe cracklib and python-crack features. An attacker can remotely trigger a segmentation fault and crash the application through unspecified vectors. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and no authentication required, leading to a partial availability impact (denial of service). There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.