NVD

Id
14872  
Name
CVE-2010-3493  
Description
Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, or the getpeername function having an ENOTCONN error, a related issue to CVE-2010-3492.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-10-19  
Modified Date
2013-05-14  
Seq
2010-3493  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
82407 14872 CVE-2010-3493 http://bugs.python.org/issue6706  View
82408 14872 CVE-2010-3493 http://bugs.python.org/issue9129  View
82409 14872 CVE-2010-3493 SUSE-SR:2010:024  View
82410 14872 CVE-2010-3493 SUSE-SR:2011:002  View
82411 14872 CVE-2010-3493 oval:org.mitre.oval:def:12210  View
82412 14872 CVE-2010-3493 http://svn.python.org/view/python/branches/py3k/Lib/smtpd.py?r1=84289&r2=84288&pathrev=84289  View
82413 14872 CVE-2010-3493 http://svn.python.org/view?view=rev&revision=84289  View
82414 14872 CVE-2010-3493 MDVSA-2010:215  View
82415 14872 CVE-2010-3493 MDVSA-2010:216  View
82416 14872 CVE-2010-3493 [oss-security] 20100909 CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
82417 14872 CVE-2010-3493 [oss-security] 20100910 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
82418 14872 CVE-2010-3493 [oss-security] 20100922 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
82419 14872 CVE-2010-3493 [oss-security] 20100924 Re: CVE Request -- Python -- accept() implementation in async core is broken => more subcases  View
82420 14872 CVE-2010-3493 44533  View
82421 14872 CVE-2010-3493 USN-1596-1  View
82422 14872 CVE-2010-3493 USN-1613-1  View
82423 14872 CVE-2010-3493 USN-1613-2  View
82424 14872 CVE-2010-3493 ADV-2011-0212  View
82425 14872 CVE-2010-3493 https://bugs.launchpad.net/zodb/+bug/135108  View
82426 14872 CVE-2010-3493 https://bugzilla.redhat.com/show_bug.cgi?id=632200  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37026 JVNDB-2010-002806 Python の smtpd モジュール内にある smtpd.py におけるサービス運用妨害 (Daemon Outage) の脆弱性 Python の smtpd モジュール内にある smtpd.py には、TCP 接続確立直後の切断処理により、ECONNABORTED、EAGAIN または EWOULDBLOCK エラーなどを含む関数の処理を容認してしまうため、競合状態が発生し、サービス運用妨害 (Daemon Outage) 状態となる脆弱性が存在します。 CVE-2010-3493 46073 CVE-2010-3493 14872 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002806.html 2010-08-23 2012-12-26 View