NVD

Id
47699  
Name
CVE-2009-0367  
Description
The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-04  
Modified Date
2010-04-27  
Seq
2009-0367  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
239064 47699 CVE-2009-0367 http://launchpad.net/bugs/335089  View
239065 47699 CVE-2009-0367 http://launchpad.net/bugs/336396  View
239066 47699 CVE-2009-0367 http://launchpad.net/bugs/cve/2009-0367  View
239067 47699 CVE-2009-0367 http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog  View
239068 47699 CVE-2009-0367 http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog  View
239069 47699 CVE-2009-0367 DSA-1737  View
239070 47699 CVE-2009-0367 ADV-2009-0595  View
239071 47699 CVE-2009-0367 http://www.wesnoth.org/forum/viewtopic.php?t=24247  View
239072 47699 CVE-2009-0367 http://www.wesnoth.org/forum/viewtopic.php?t=24340  View
239073 47699 CVE-2009-0367 wesnoth-pythonai-code-execution(49058)  View
239074 47699 CVE-2009-0367 https://gna.org/bugs/index.php?13048  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44771 JVNDB-2009-005778 Wesnoth の Python AI モジュールにおけるサンドボックスをエスケープされる脆弱性 Wesnoth の Python AI モジュールには、サンドボックスをエスケープされる、および任意のコードを実行される脆弱性が存在します。 CVE-2009-0367 37798 CVE-2009-0367 47699 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005778.html 2009-03-02 2012-12-20 View