Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo: GLSA 200502-09 High: Python XML-RPC Remote Execution Risk

gentoo
Calendar Grey February 8, 2005
Scroller Gentoo
Gentoo GLSA 202203-17 addresses a critical vulnerability enabling remote code execution stemming from security issues within the PHP JSON server.
Python-based XML-RPC servers may be vulnerable to remote execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200502-09 https://security.gentoo.org/ Severity: High Title: Python: Arbitrary code execution through SimpleXMLRPCServer Date: February 08, 2005 Bugs: #80592 ID: 200502-09

Synopsis ======= Python-based XML-RPC servers may be vulnerable to remote execution of arbitrary code.
Background ========= Python is an interpreted, interactive, object-oriented, cross-platform programming language.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-lang/python <= 2.3.4 >= 2.3.4-r1 *>= 2.3.3-r2 *>= 2.2.3-r6
========== Graham Dumpleton discovered that XM...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Gentoo high severity code execution remote execution Python XML-RPC

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory Gentoo high severity code execution remote execution Python XML-RPC

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround