A vulnerability has been identified in Hiki, which could be exploited by attackers to cause a denial of service. This flaw is due to an error in the diff functionality that fails to properly handle overly large pages, which could be exploited by attackers to exhaust all available memory resources, creating a denial of service condition.

Affected Products

Hiki versions 0.6.0 through 0.6.5
Hiki versions 0.8.0 through 0.8.5

Solution

Upgrade to Hiki version 0.8.6 :
http://hikiwiki.org/en/download.html

References

http://www.vupen.com/english/advisories/2006/2643
http://hikiwiki.org/en/advisory20060703.html

Credits

Vulnerability reported by the vendor

Changelog

2006-07-03 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.