CVE

Id
46077  
CVE No.
CVE-2010-3493  
Status
Candidate  
Description
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.  
Phase
Assigned (20100924)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
501136 46077 CVE-2010-3493 MLIST:[oss-security] 20100909 CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501137 46077 CVE-2010-3493 URL:http://www.openwall.com/lists/oss-security/2010/09/09/6  View
501138 46077 CVE-2010-3493 MLIST:[oss-security] 20100910 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501139 46077 CVE-2010-3493 URL:http://www.openwall.com/lists/oss-security/2010/09/11/2  View
501140 46077 CVE-2010-3493 MLIST:[oss-security] 20100922 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501141 46077 CVE-2010-3493 URL:http://www.openwall.com/lists/oss-security/2010/09/22/3  View
501142 46077 CVE-2010-3493 MLIST:[oss-security] 20100924 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
501143 46077 CVE-2010-3493 URL:http://www.openwall.com/lists/oss-security/2010/09/24/3  View
501144 46077 CVE-2010-3493 MISC:http://bugs.python.org/issue6706  View
501145 46077 CVE-2010-3493 MISC:https://bugs.launchpad.net/zodb/+bug/135108  View
501146 46077 CVE-2010-3493 CONFIRM:http://bugs.python.org/issue9129  View
501147 46077 CVE-2010-3493 CONFIRM:http://svn.python.org/view/python/branches/py3k/Lib/smtpd.py?r1=84289&r2=84288&pathrev=84289  View
501148 46077 CVE-2010-3493 CONFIRM:http://svn.python.org/view?view=rev&revision=84289  View
501149 46077 CVE-2010-3493 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=632200  View
501150 46077 CVE-2010-3493 MANDRIVA:MDVSA-2010:216  View
501151 46077 CVE-2010-3493 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:216  View
501152 46077 CVE-2010-3493 MANDRIVA:MDVSA-2010:215  View
501153 46077 CVE-2010-3493 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:215  View
501154 46077 CVE-2010-3493 SUSE:SUSE-SR:2010:024  View
501155 46077 CVE-2010-3493 URL:http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html  View
501156 46077 CVE-2010-3493 SUSE:SUSE-SR:2011:002  View
501157 46077 CVE-2010-3493 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
501158 46077 CVE-2010-3493 UBUNTU:USN-1596-1  View
501159 46077 CVE-2010-3493 URL:http://www.ubuntu.com/usn/USN-1596-1  View
501160 46077 CVE-2010-3493 UBUNTU:USN-1613-2  View
501161 46077 CVE-2010-3493 URL:http://www.ubuntu.com/usn/USN-1613-2  View
501162 46077 CVE-2010-3493 UBUNTU:USN-1613-1  View
501163 46077 CVE-2010-3493 URL:http://www.ubuntu.com/usn/USN-1613-1  View
501164 46077 CVE-2010-3493 BID:44533  View
501165 46077 CVE-2010-3493 URL:http://www.securityfocus.com/bid/44533  View
501166 46077 CVE-2010-3493 OVAL:oval:org.mitre.oval:def:12210  View
501167 46077 CVE-2010-3493 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12210  View
501168 46077 CVE-2010-3493 SECUNIA:43068  View
501169 46077 CVE-2010-3493 URL:http://secunia.com/advisories/43068  View
501170 46077 CVE-2010-3493 SECUNIA:50858  View
501171 46077 CVE-2010-3493 URL:http://secunia.com/advisories/50858  View
501172 46077 CVE-2010-3493 SECUNIA:51024  View
501173 46077 CVE-2010-3493 URL:http://secunia.com/advisories/51024  View
501174 46077 CVE-2010-3493 SECUNIA:51040  View
501175 46077 CVE-2010-3493 URL:http://secunia.com/advisories/51040  View
501176 46077 CVE-2010-3493 VUPEN:ADV-2011-0212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28102 JVNDB-2012-003809 Symantec Norton AntiVirus における任意のコードを実行される脆弱性 Symantec Norton AntiVirus は、hcp:// URL を処理する Microsoft ヘルプとサポート センター (Microsoft Help and Support Center) とのやり取りを適切に行わないため、検知アプローチによるコード実行停止処理に遅れが発生することにより、任意のコードを実行される脆弱性が存在します。 CVE-2010-3497 46077 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003809.html  View