Python repr() Processing of UTF-32/UCS-4 Strings May Let Remote Users Deny Service or Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1017019
|
|
SecurityTracker URL: http://securitytracker.com/id?1017019
|
|
CVE Reference: CVE-2006-4980
(Links to External Site)
|
Updated: Oct 14 2006
|
Original Entry Date: Oct 9 2006
|
Impact: Denial of service via network, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): 2.2, 2.3, 2.4 prior to 2.4.4
|
Description: A vulnerability was reported in Python. A remote user can cause denial of service conditions or potentially execute arbitrary code.
The Python repr() function does not properly process UTF-32/UCS-4 strings. A remote user may be able to send specially crafted data
to a Python-based application that uses the repr() function on the user-supplied data to cause the application to crash or potentially
execute arbitrary code.
Benjamin C. Wiley Sittler reported this vulnerability.
The original bug report is available at:
http://sourceforge.net/tracker/index.php?
func=detail&aid=1541585&group_id=5470&atid=305470
|
Impact: A remote user can cause denial of service conditions or potentially execute arbitrary code.
|
Solution: The vendor has issued the following patches:
http://python.org/files/news/security/PSF-2006-001/patch-2.3.txt (Python 2.2, 2.3)
http://python.org/files/news/security/P
SF-2006-001/patch-2.4.txt (Python 2.4)
The vendor plans to issue a fixed version (2.4.4).
Python version 2.5 already contains
the fix.
The Python advisory is available at:
http://www.python.org/news/security/PSF-2006-001/
|
Vendor URL: www.python.org/news/security/PSF-2006-001/ (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Linux (Any), UNIX (Any), Windows (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Mon, 9 Oct 2006 18:06:51 -0400
Subject: Python vulnerability
|
Red Hat wrote:
A flaw was discovered in the way that the Python repr() function handled
UTF-32/UCS-4 strings. If an application written in Python used the repr()
function on untrusted data, this could lead to a denial of service or
possibly allow the execution of arbitrary code with the privileges of the
Python application. (CVE-2006-4980)
|
|
