NVD

Id
8451  
Name
CVE-2011-1521  
Description
The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-05-24  
Modified Date
2014-02-20  
Seq
2011-1521  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48438 8451 CVE-2011-1521 http://bugs.python.org/issue11662  View
48439 8451 CVE-2011-1521 http://hg.python.org/cpython/file/96a6c128822b/Misc/NEWS  View
48440 8451 CVE-2011-1521 http://hg.python.org/cpython/file/b2934d98dac1/Misc/NEWS  View
48441 8451 CVE-2011-1521 http://hg.python.org/cpython/rev/96a6c128822b/  View
48442 8451 CVE-2011-1521 http://hg.python.org/cpython/rev/b2934d98dac1/  View
48443 8451 CVE-2011-1521 APPLE-SA-2011-10-12-3  View
48444 8451 CVE-2011-1521 SUSE-SR:2011:009  View
48445 8451 CVE-2011-1521 [oss-security] 20110324 CVE Request -- Python (urllib, urllib2): Improper management of ftp:// and file:// URL schemes  View
48446 8451 CVE-2011-1521 [oss-security] 20110328 Re: CVE Request -- Python (urllib, urllib2): Improper management of ftp:// and file:// URL schemes  View
48447 8451 CVE-2011-1521 [oss-security] 20110911 CVE Request -- Django: v1.3.1, v1.2.7 multiple security flaws  View
48448 8451 CVE-2011-1521 [oss-security] 20110913 Re: CVE Request -- Django: v1.3.1, v1.2.7 multiple security flaws  View
48449 8451 CVE-2011-1521 [oss-security] 20110916 Re: CVE Request -- Django: v1.3.1, v1.2.7 multiple security flaws  View
48450 8451 CVE-2011-1521 1025488  View
48451 8451 CVE-2011-1521 http://support.apple.com/kb/HT5002  View
48452 8451 CVE-2011-1521 MDVSA-2011:096  View
48453 8451 CVE-2011-1521 USN-1592-1  View
48454 8451 CVE-2011-1521 USN-1596-1  View
48455 8451 CVE-2011-1521 USN-1613-1  View
48456 8451 CVE-2011-1521 USN-1613-2  View
48457 8451 CVE-2011-1521 https://bugzilla.redhat.com/show_bug.cgi?id=690560  View
48458 8451 CVE-2011-1521 https://bugzilla.redhat.com/show_bug.cgi?id=737366  View
48459 8451 CVE-2011-1521 https://www.djangoproject.com/weblog/2011/sep/09/  View
48460 8451 CVE-2011-1521 https://www.djangoproject.com/weblog/2011/sep/10/127/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31450 JVNDB-2011-001690 Python の urllib および urllib2 モジュールにおける重要な情報を取得される脆弱性 Python の urllib および urllib2 モジュールは、file: URLs にリダイレクトする Location ヘッダを処理する際、重要な情報を取得される、またはサービス運用妨害 (リソース消費) 状態となる脆弱性が存在します。 CVE-2011-1521 49428 CVE-2011-1521 8451 6.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001690.html 2011-05-15 2012-12-18 View