CVE-2005-0089 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-0089
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-0089

Description: The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/19217 TRUSTIX http://www.trustix.org/errata/2005/0003/ ST 1013083 SAID Secunia Advisory: SA14128 REDHAT http://www.redhat.com/support/errata/RHSA-2005-108.html MANDRAKE http://www.mandrakesoft.com/security/advisories?name=MDKSA-2005:035 DEBIAN http://www.debian.org/security/2005/dsa-666 CONFIRM http://python.org/security/PSF-2005-001/patch-2.2.txt http://www.python.org/security/PSF-2005-001/ BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=110746469728728&w=2 BID 12437

Return to the previous page.