PT-2008-1896 · Cherrypy · Cherrypy

Published 2008-01-12 · Updated 2022-05-01 · CVE-2008-0252

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions CherryPy versions 2.1 CherryPy versions 2.x CherryPy versions 3.0.x up to 3.0.2

Description A directory traversal issue in the get file path function allows remote attackers to create or delete arbitrary files, and possibly read and write portions of arbitrary files, via a crafted session id in a cookie. This issue affects various components, including lib/sessions.py and filter/sessionfilter.py.

Recommendations For CherryPy version 2.1, update to a version that fixes the get file path function issue. For CherryPy version 2.x, update to a version that fixes the get file path function issue. For CherryPy versions 3.0.x up to 3.0.2, update to a version that fixes the get file path function issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-0252

DSA-1481-1

GHSA-76X8-GG39-5JJG

PYSEC-2008-3

Affected Products

Cherrypy

References · 35

• 🔥 http://cherrypy.org/changeset/1774 · Exploit
• 🔥 http://cherrypy.org/ticket/744 · Exploit
• 🔥 http://cherrypy.org/changeset/1776 · Exploit
• 🔥 http://cherrypy.org/changeset/1775 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-0252 · Vendor Advisory
• http://secunia.com/advisories/28354 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200801-11.xml · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-January/msg00297.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-76x8-gg39-5jjg · Vendor Advisory
• http://debian.org/security/2008/dsa-1481 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2008-0252 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2008-3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0252 · Security Note
• https://redhat.com/archives/fedora-package-announce/2008-January/msg00240.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-0252 · Vendor Advisory