CVSS: 5.0EPSS: 7%CPEs: 2EXPL: 1CVE-2007-2052 – Python 2.5 - 'PyLocale_strxfrm' Remote Information Leak
https://notcve.org/view.php?id=CVE-2007-2052
Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination. Error de superación de límite (off-by-one) en la función PyLocale_strxfrm de Modules/_localemodule.c para Python 2.4 y 2.5 provoca que se utilice un tamaño de búfer incorrecto para la función strxfrm, lo cual permite a atacantes locales o remotos dependiendo del contexto leer porciones de memoria mediante manipulaciones desconocidas que disparan una lectura fuera de límite del búfer debido a la falta de una terminación null. • https://www.exploit-db.com/exploits/30018 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416934 http://lists.vmware.com/pipermail/security-announce/2008/000005.html http://secunia.com/advisories/25190 http://secunia.com/advisories/25217 http://secunia.com/advisories/25233 http://secunia.com/advisories/25353 http://secunia.com/advisories/25787 http://secunia.com/advisories/28027 http://secunia.com/advisories/28050 http://secunia.com/advisories/29032 http://secunia.com/a • CWE-193: Off-by-one Error •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2CVE-2007-1657 – MiniGZip - Controls File_Compress Buffer Overflow
https://notcve.org/view.php?id=CVE-2007-1657
Stack-based buffer overflow in the file_compress function in minigzip (Modules/zlib) in Python 2.5 allows context-dependent attackers to execute arbitrary code via a long file argument. Desbordamiento de búfer en la función file_compress en minigzip (Modules/zlib) en Python 2.5 permite a atacantes dependientes del contexto ejecutar código de su elección a través del un argumento de archivo. • https://www.exploit-db.com/exploits/29740 http://attrition.org/pipermail/vim/2007-March/001430.html http://osvdb.org/43550 http://www.securityfocus.com/archive/1/462799/100/0/threaded http://www.securityfocus.com/bid/22964 •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0CVE-2006-4980 – python repr unicode buffer overflow
https://notcve.org/view.php?id=CVE-2006-4980
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts. Desbordamiento de bufer en la función repr en Python 2.3 hasta la 2.6 anterior al 22/08/2006 permite a un atacante dependiente del contexto provocar denegación de servicio y posiblemente ejecutar código de su elección a través de secuencias anchas hechas a mano del carácter UTF-32/UCS-4 a ciertas secuencias de comandos. • ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391589 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=208162 http://kb.vmware.com/KanisaPlatform/Publishing/882/5120103_f.SAL_Public.html http://secunia.com/advisories/22276 http://secunia.com/advisories/22297 http://secunia.com/advisories/22303 http://secunia.com/advisories/22357 http://secunia.com/advisories/22358 http://secunia.com/advisories/22379 •
CVSS: 3.7EPSS: 0%CPEs: 1EXPL: 2CVE-2006-1542 – Python 2.4.2 - 'realpath()' Local Stack Overflow
https://notcve.org/view.php?id=CVE-2006-1542
Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected. • https://www.exploit-db.com/exploits/1591 http://secunia.com/advisories/31492 http://www.gotfault.net/research/exploit/gexp-python.py http://www.redhat.com/support/errata/RHSA-2008-0629.html https://access.redhat.com/security/cve/CVE-2006-1542 https://bugzilla.redhat.com/show_bug.cgi?id=430640 •
CVSS: 7.5EPSS: 12%CPEs: 2EXPL: 0CVE-2005-0089
https://notcve.org/view.php?id=CVE-2005-0089
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes. • http://marc.info/?l=bugtraq&m=110746469728728&w=2 http://python.org/security/PSF-2005-001/patch-2.2.txt http://secunia.com/advisories/14128 http://securitytracker.com/id?1013083 http://www.debian.org/security/2005/dsa-666 http://www.mandriva.com/security/advisories?name=MDKSA-2005:035 http://www.python.org/security/PSF-2005-001 http://www.redhat.com/support/errata/RHSA-2005-108.html http://www.securityfocus.com/bid/12437 http://www.trustix.org/errata/2005/00 •