PT-2013-6307 · Python · Http.Server.Cgihttprequesthandler

Published 2013-10-29 · Updated 2013-10-29

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions http.server.CGIHTTPRequestHandler (affected versions not specified)

Description The issue is related to an error in separating the path and filename of the CGI script to run, allowing the execution of arbitrary executables in the directory under which the server was started. This is specifically related to the http.server.CGIHTTPRequestHandler.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

PSF-2013-3

Affected Products

Http.Server.Cgihttprequesthandler

References · 2

• https://osv.dev/vulnerability/PSF-2013-3 · Vendor Advisory
• https://bugs.python.org/issue19435 · Note