PT-2013-6307 · Python · Http.Server.Cgihttprequesthandler

Publicado 2013-10-29 · Atualizado 2013-10-29

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions http.server.CGIHTTPRequestHandler (affected versions not specified)

Description The issue is related to an error in separating the path and filename of the CGI script to run, allowing the execution of arbitrary executables in the directory under which the server was started. This is specifically related to the http.server.CGIHTTPRequestHandler.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

PSF-2013-3

Produtos afetados

Http.Server.Cgihttprequesthandler

Referências · 2

• https://bugs.python.org/issue19435 · Nota
• https://osv.dev/vulnerability/PSF-2013-3 · Aviso do Fabricante