Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Guido Van Rossum

Pesquisador dePython development team
#37452de 55,141
7.5CVSS total
Vulnerabilidades · 1
PT-2005-1198
7.5
2005-02-06
Python · Simplexmlrpcserver · CVE-2005-0089
**Name of the Vulnerable Software and Affected Versions** Python versions 2.2, 2.3 before 2.3.5, and 2.4 **Description** The issue allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes, when the SimpleXMLRPCServer library module is used by XML-RPC servers that register an object without a dispatch method. **Recommendations** For Python version 2.2, update to a version with the necessary security fixes. For Python version 2.3 before 2.3.5, update to version 2.3.5 or later. For Python version 2.4, consider disabling the use of the register instance method without a dispatch method until a patch is available.