Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

python-django-piston: remote code execution

Package(s):

python-django-piston

CVE #(s):

CVE-2011-4103

Created:

November 14, 2011

Updated:

November 16, 2011

Description:

From the Debian advisory:

It was discovered that the Piston framework can deserialize untrusted YAML and Pickle data, leading to remote code execution.

Alerts:

Debian

2011-11-11

(Log in to post comments)