NVD

Id
8003  
Name
CVE-2011-1015  
Description
The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-05-09  
Modified Date
2013-05-14  
Seq
2011-1015  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
45531 8003 CVE-2011-1015 http://bugs.python.org/issue2254  View
45532 8003 CVE-2011-1015 http://hg.python.org/cpython/rev/c6c4398293bd/  View
45533 8003 CVE-2011-1015 [oss-security] 20110223 CVE request: Information disclosure in CGIHTTPServer from Python  View
45534 8003 CVE-2011-1015 [oss-security] 20110224 Re: CVE request: Information disclosure in CGIHTTPServer from Python  View
45535 8003 CVE-2011-1015 1025489  View
45536 8003 CVE-2011-1015 http://svn.python.org/view?view=revision&revision=71303  View
45537 8003 CVE-2011-1015 MDVSA-2011:096  View
45538 8003 CVE-2011-1015 46541  View
45539 8003 CVE-2011-1015 USN-1596-1  View
45540 8003 CVE-2011-1015 USN-1613-1  View
45541 8003 CVE-2011-1015 USN-1613-2  View
45542 8003 CVE-2011-1015 https://bugzilla.redhat.com/show_bug.cgi?id=680094  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41646 JVNDB-2009-002653 Python の CGIHTTPServer モジュール内にある is_cgi メソッドにおけるスクリプトのソースコードを読まれる脆弱性 Python の CGIHTTPServer モジュール内にある CGIHTTPServer.py の is_cgi メソッドには、スクリプトのソースコードを読まれる脆弱性が存在します。 CVE-2011-1015 48922 CVE-2011-1015 8003 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002653.html 2009-04-06 2012-12-26 View