LWN.net Logo

Not logged in

Log in now

Create an account

Subscribe to LWN

Recent Features

LWN.net Weekly Edition for May 23, 2013

An "enum" for Python 3

An unexpected perf feature

LWN.net Weekly Edition for May 16, 2013

A look at the PyPy 2.0 release

Printable page
Weekly edition Kernel Security Distributions Contact Us Search
Archives Calendar Subscribe Write for LWN LWN.net FAQ Sponsors

python2.4: arbitrary code execution

Package(s):python2.4 CVE #(s):CVE-2008-1887
Created:April 21, 2008 Updated:August 25, 2009
Description:

From the Debian advisory:

CVE-2008-1887: Justin Ferguson discovered that insufficient input validation in PyString_FromStringAndSize() may lead to the execution of arbitrary code.

Alerts:
rPath rPSA-2009-0122-1 2009-08-24
CentOS CESA-2009:1176 2009-07-29
CentOS CESA-2009:1178 2009-07-27
Red Hat RHSA-2009:1176-01 2009-07-27
Red Hat RHSA-2009:1177-01 2009-07-27
Red Hat RHSA-2009:1178-02 2009-07-27
SuSE SUSE-SR:2008:017 2008-08-29
Ubuntu USN-632-1 2008-08-01
Debian DSA-1620-1 2008-07-27
Gentoo 200807-01 2008-07-01
Debian DSA-1551-1 2008-04-19
(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds