PT-2019-20127 · Supybot+1 · Supybot+1

Publicado 2019-11-16 · Atualizado 2019-11-16

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Limnoria versions prior to 2019.11.09 Supybot versions through 2018-05-09

Description The issue allows remote unprivileged attackers to disclose information or possibly have unspecified other impact. This is achieved via the calc and icalc IRC commands in the Math plugin.

Recommendations For Limnoria versions prior to 2019.11.09, update to version 2019.11.09 or later. For Supybot versions through 2018-05-09, consider disabling the Math plugin until a patch is available.

Identificadores relacionados

PYSEC-2019-32

Produtos afetados

Limnoria

Supybot

Referências · 6

• https://github.com/ProgVal/Limnoria/wiki/math-eval-vulnerability · Nota
• https://github.com/ProgVal/Limnoria/commit/3848ae78de45b35c029cc333963d436b9d2f0a35 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/DRNOUHFEN75QAIKT4Y3HDN3TT5LSIWN2 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/54CQM2TEXRADLE77VOMCPHL5PBHR3ZWJ · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/5P2AGND54UIJV3WHOYO2YINIXSDGAAPO · Aviso do Fabricante
• https://osv.dev/vulnerability/PYSEC-2019-32 · Aviso do Fabricante