CVE

Id
46076  
CVE No.
CVE-2010-3492  
Status
Candidate  
Description
The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote attackers to conduct denial of service attacks that terminate these applications via network connections.  
Phase
Assigned (20100924)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
501122 46076 CVE-2010-3492 MLIST:[oss-security] 20100909 CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501123 46076 CVE-2010-3492 URL:http://www.openwall.com/lists/oss-security/2010/09/09/6  View
501124 46076 CVE-2010-3492 MLIST:[oss-security] 20100910 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501125 46076 CVE-2010-3492 URL:http://www.openwall.com/lists/oss-security/2010/09/11/2  View
501126 46076 CVE-2010-3492 MLIST:[oss-security] 20100922 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501127 46076 CVE-2010-3492 URL:http://www.openwall.com/lists/oss-security/2010/09/22/3  View
501128 46076 CVE-2010-3492 MLIST:[oss-security] 20100924 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501129 46076 CVE-2010-3492 URL:http://www.openwall.com/lists/oss-security/2010/09/24/3  View
501130 46076 CVE-2010-3492 CONFIRM:http://bugs.python.org/issue6706  View
501131 46076 CVE-2010-3492 MANDRIVA:MDVSA-2010:216  View
501132 46076 CVE-2010-3492 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:216  View
501133 46076 CVE-2010-3492 MANDRIVA:MDVSA-2010:215  View
501134 46076 CVE-2010-3492 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:215  View
501135 46076 CVE-2010-3492 OVAL:oval:org.mitre.oval:def:12111  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28101 JVNDB-2012-003808 McAfee VirusScan Enterprise における任意のコードを実行される脆弱性 McAfee VirusScan Enterprise は、hcp:// URL を処理する Microsoft ヘルプとサポート センター (Microsoft Help and Support Center) とのやり取りを適切に行わないため、検知アプローチによるコード実行停止処理に遅れが発生することにより、任意のコードを実行される脆弱性が存在します。 CVE-2010-3496 46076 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003808.html  View