PT-2007-3395 · Python+2 · Python+2

Published 2007-04-16 · Updated 2024-06-15 · CVE-2007-2052

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Python versions 2.4 through 2.5

Description The issue is caused by an off-by-one error in the PyLocale strxfrm function, which results in an incorrect buffer size being used for the strxfrm function. This allows attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.

Recommendations For Python versions 2.4 and 2.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-193

Related Identifiers

CVE-2007-2052

DSA-1551-1

DSA-1620-1

OPENSUSE-SU-2024:11202-1

RHSA-2007:1076

RHSA-2007:1077

RHSA-2007_1076

RHSA-2008:0264

RHSA-2008:0525

RHSA-2008:0629

RHSA-2009:1176

RHSA-2009_1176

SUSE-SU-2020:0234-1

Affected Products

Python

Red Hat

Suse

References · 203

• 🔥 https://exploit-db.com/exploits/30018 · Exploit
• http://redhat.com/support/errata/RHSA-2007-1076.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04725 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2007:099 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09569 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:11202-1 · Vendor Advisory
• http://python.org/download/releases/2.5.1/NEWS.txt · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_13_sr.html · Vendor Advisory
• http://trustix.org/errata/2007/0019 · Vendor Advisory
• http://debian.org/security/2008/dsa-1620 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0234-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04723 · Security Note
• http://debian.org/security/2008/dsa-1551 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2052 · Security Note
• http://redhat.com/support/errata/RHSA-2007-1077.html · Vendor Advisory