CVE

Id
45061  
CVE No.
CVE-2010-2477  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound.  
Phase
Assigned (20100628)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
491328 45061 CVE-2010-2477 MLIST:[oss-security] 20100629 CVE request: XSS in python paste  View
491329 45061 CVE-2010-2477 URL:http://marc.info/?l=oss-security&m=127785414818815&w=2  View
491330 45061 CVE-2010-2477 MLIST:[oss-security] 20100630 Re: CVE request: XSS in python paste  View
491331 45061 CVE-2010-2477 URL:http://marc.info/?l=oss-security&m=127792576822169&w=2  View
491332 45061 CVE-2010-2477 MLIST:[pylons-discuss] 20100624 Paste 1.7.4, security fix for XSS hole  View
491333 45061 CVE-2010-2477 URL:http://groups.google.com/group/pylons-discuss/msg/8c256dc076a408d8?dmode=source&output=gplain  View
491334 45061 CVE-2010-2477 CONFIRM:http://bitbucket.org/ianb/paste/changeset/fcae59df8b56  View
491335 45061 CVE-2010-2477 CONFIRM:http://pylonshq.com/articles/archives/2010/6/paste_174_released_addresses_xss_security_hole  View
491336 45061 CVE-2010-2477 CONFIRM:http://groups.google.com/group/paste-users/browse_thread/thread/3b3fff3dadd0b1e5?pli=1  View
491337 45061 CVE-2010-2477 UBUNTU:USN-1026-1  View
491338 45061 CVE-2010-2477 URL:http://www.ubuntu.com/usn/USN-1026-1  View
491339 45061 CVE-2010-2477 BID:41160  View
491340 45061 CVE-2010-2477 URL:http://www.securityfocus.com/bid/41160  View
491341 45061 CVE-2010-2477 SECUNIA:42500  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35955 JVNDB-2010-001735 LibTIFF の TIFFExtractData マクロにおけるサービス運用妨害 (DoS) の脆弱性 LibTIFF の TIFFExtractData マクロには、TIFF のディレクトリエントリーの詳細不明なタグタイプを適切に処理しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-2481 45061 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001735.html  View