PT-2011-3187 · Python+2 · Python+2
Publicado
2011-05-05
·
Atualizado
2024-06-15
·
CVE-2011-1521
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Python versions prior to 2.7.2
Python versions prior to 3.2.1
Description
The issue allows remote attackers to obtain sensitive information or cause a denial of service by specifying redirection to file: URLs in Location headers. This can be achieved through crafted URLs, such as file:///etc/passwd or file:///dev/zero.
Recommendations
For versions prior to 2.7.2, update to version 2.7.2 or later to resolve the issue.
For versions prior to 3.2.1, update to version 3.2.1 or later to resolve the issue.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Python
Red Hat
Suse