CVE

Id
11295  
CVE No.
CVE-2005-0089  
Status
Candidate  
Description
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.  
Phase
Assigned (20050118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
80056 11295 CVE-2005-0089 BUGTRAQ:20050203 Python Security Advisory PSF-2005-001 - SimpleXMLRPCServer.py  View
80057 11295 CVE-2005-0089 URL:http://marc.info/?l=bugtraq&m=110746469728728&w=2  View
80058 11295 CVE-2005-0089 CONFIRM:http://www.python.org/security/PSF-2005-001/  View
80059 11295 CVE-2005-0089 CONFIRM:http://python.org/security/PSF-2005-001/patch-2.2.txt  View
80060 11295 CVE-2005-0089 DEBIAN:DSA-666  View
80061 11295 CVE-2005-0089 URL:http://www.debian.org/security/2005/dsa-666  View
80062 11295 CVE-2005-0089 MANDRAKE:MDKSA-2005:035  View
80063 11295 CVE-2005-0089 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:035  View
80064 11295 CVE-2005-0089 REDHAT:RHSA-2005:108  View
80065 11295 CVE-2005-0089 URL:http://www.redhat.com/support/errata/RHSA-2005-108.html  View
80066 11295 CVE-2005-0089 TRUSTIX:2005-0003  View
80067 11295 CVE-2005-0089 URL:http://www.trustix.org/errata/2005/0003/  View
80068 11295 CVE-2005-0089 BID:12437  View
80069 11295 CVE-2005-0089 URL:http://www.securityfocus.com/bid/12437  View
80070 11295 CVE-2005-0089 OVAL:oval:org.mitre.oval:def:9811  View
80071 11295 CVE-2005-0089 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9811  View
80072 11295 CVE-2005-0089 SECTRACK:1013083  View
80073 11295 CVE-2005-0089 URL:http://securitytracker.com/id?1013083  View
80074 11295 CVE-2005-0089 SECUNIA:14128  View
80075 11295 CVE-2005-0089 URL:http://secunia.com/advisories/14128  View
80076 11295 CVE-2005-0089 XF:python-simplexmlrpcserver-bypass(19217)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61930 JVNDB-2005-000132 Red Hat Linux の 4GB/4GB スプリットにおける特権を取得される脆弱性 ------------ CVE-2005-0091 11295 7.2 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000132.html  View