The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:54
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://marc.info/?l=bugtraq&m=110746469728728&w=2 - Mailing List, Third Party Advisory | |
| References | () http://python.org/security/PSF-2005-001/patch-2.2.txt - Broken Link, Patch | |
| References | () http://secunia.com/advisories/14128 - Broken Link | |
| References | () http://securitytracker.com/id?1013083 - Broken Link, Third Party Advisory, VDB Entry | |
| References | () http://www.debian.org/security/2005/dsa-666 - Patch, Third Party Advisory | |
| References | () http://www.mandriva.com/security/advisories?name=MDKSA-2005:035 - Broken Link, Third Party Advisory | |
| References | () http://www.python.org/security/PSF-2005-001/ - Broken Link, Patch, Vendor Advisory | |
| References | () http://www.redhat.com/support/errata/RHSA-2005-108.html - Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/12437 - Third Party Advisory, VDB Entry | |
| References | () http://www.trustix.org/errata/2005/0003/ - Third Party Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/19217 - VDB Entry | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9811 - Broken Link |
02 Aug 2023, 18:04
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MANDRAKE) http://www.mandriva.com/security/advisories?name=MDKSA-2005:035 - Broken Link, Third Party Advisory | |
| References | (DEBIAN) http://www.debian.org/security/2005/dsa-666 - Patch, Third Party Advisory | |
| References | (CONFIRM) http://www.python.org/security/PSF-2005-001/ - Broken Link, Patch, Vendor Advisory | |
| References | (BID) http://www.securityfocus.com/bid/12437 - Third Party Advisory, VDB Entry | |
| References | (BUGTRAQ) http://marc.info/?l=bugtraq&m=110746469728728&w=2 - Mailing List, Third Party Advisory | |
| References | (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9811 - Broken Link | |
| References | (TRUSTIX) http://www.trustix.org/errata/2005/0003/ - Third Party Advisory | |
| References | (SECUNIA) http://secunia.com/advisories/14128 - Broken Link | |
| References | (CONFIRM) http://python.org/security/PSF-2005-001/patch-2.2.txt - Broken Link, Patch | |
| References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/19217 - VDB Entry | |
| References | (REDHAT) http://www.redhat.com/support/errata/RHSA-2005-108.html - Third Party Advisory | |
| References | (SECTRACK) http://securitytracker.com/id?1013083 - Broken Link, Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:python_software_foundation:python:2.3.3:*:*:*:*:*:*:* cpe:2.3:a:python_software_foundation:python:2.2:*:*:*:*:*:*:* cpe:2.3:a:python_software_foundation:python:2.3:*:*:*:*:*:*:* cpe:2.3:a:python_software_foundation:python:2.4:*:*:*:*:*:*:* cpe:2.3:a:python_software_foundation:python:2.3.1:*:*:*:*:*:*:* cpe:2.3:a:python_software_foundation:python:2.3.2:*:*:*:*:*:*:* |
cpe:2.3:a:python:python:*:*:*:*:*:*:*:* cpe:2.3:a:python:python:2.4.0:*:*:*:*:*:*:* |
| First Time |
Python
Python python |
Information
Published : 2005-05-02 04:00
Updated : 2024-11-20 23:54
NVD link : CVE-2005-0089
Mitre link : CVE-2005-0089
CVE.ORG link : CVE-2005-0089
JSON object : View
Products Affected
python
- python
CWE