CVE-2011-4103

emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.debian.org/security/2011/dsa-2344
http://www.openwall.com/lists/oss-security/2011/11/01/10
https://bitbucket.org/jespern/django-piston/commits/91bdaec89543/	Patch
https://bugzilla.redhat.com/show_bug.cgi?id=750658
https://www.djangoproject.com/weblog/2011/nov/01/piston-and-tastypie-security-releases/	Vendor Advisory
http://www.debian.org/security/2011/dsa-2344
http://www.openwall.com/lists/oss-security/2011/11/01/10
https://bitbucket.org/jespern/django-piston/commits/91bdaec89543/	Patch
https://bugzilla.redhat.com/show_bug.cgi?id=750658
https://www.djangoproject.com/weblog/2011/nov/01/piston-and-tastypie-security-releases/	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:djangoproject:piston:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:31

Type	Values Removed	Values Added
References	~~() http://www.debian.org/security/2011/dsa-2344 -~~	() http://www.debian.org/security/2011/dsa-2344 -
References	~~() http://www.openwall.com/lists/oss-security/2011/11/01/10 -~~	() http://www.openwall.com/lists/oss-security/2011/11/01/10 -
References	~~() https://bitbucket.org/jespern/django-piston/commits/91bdaec89543/ - Patch~~	() https://bitbucket.org/jespern/django-piston/commits/91bdaec89543/ - Patch
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=750658 -~~	() https://bugzilla.redhat.com/show_bug.cgi?id=750658 -
References	~~() https://www.djangoproject.com/weblog/2011/nov/01/piston-and-tastypie-security-releases/ - Vendor Advisory~~	() https://www.djangoproject.com/weblog/2011/nov/01/piston-and-tastypie-security-releases/ - Vendor Advisory

Information

Published : 2014-10-27 01:55

Updated : 2024-11-21 01:31

NVD link : CVE-2011-4103

Mitre link : CVE-2011-4103

CVE.ORG link : CVE-2011-4103

JSON object : View

Products Affected

djangoproject

piston

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2011-4103", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-10-27T01:55:23.280", "references": [{"url": "http://www.debian.org/security/2011/dsa-2344", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2011/11/01/10", "source": "secalert@redhat.com"}, {"url": "https://bitbucket.org/jespern/django-piston/commits/91bdaec89543/", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=750658", "source": "secalert@redhat.com"}, {"url": "https://www.djangoproject.com/weblog/2011/nov/01/piston-and-tastypie-security-releases/", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2011/dsa-2344", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2011/11/01/10", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bitbucket.org/jespern/django-piston/commits/91bdaec89543/", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=750658", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.djangoproject.com/weblog/2011/nov/01/piston-and-tastypie-security-releases/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to the yaml.load method."}, {"lang": "es", "value": "emitters.py en Django Piston anterior a 0.2.3 y 0.2.x anterior a 0.2.2.1 no deserializa debidamente los datos YAML, lo que permite a atacantes remotos ejecutar c\u00f3digo Python arbitrario a trav\u00e9s de vectores relacionados con el m\u00e9todo yaml.load."}], "lastModified": "2024-11-21T01:31:51.107", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:djangoproject:piston:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C10E7821-14C4-4A1E-98FD-2C7991937C98", "versionEndIncluding": "0.2.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}