Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 8.04 LTS: USN-1613-1 Critical: Python 2.5 Denial of Service

ubuntu
Calendar Grey October 17, 2012
Scroller Ubuntu
Python 2.5 for Ubuntu has addressed several security flaws that could lead to code execution and denial of service threats.
Several security issues were fixed in Python 2.5.

Summary

Several security issues were fixed in Python 2.5.

Software Description:

- python2.5: An interactive high-level object-oriented language (version

2.5)

Details:

It was discovered that Python would prepend an empty string to sys.path

under certain circumstances. A local attacker with write access to the

current working directory could exploit this to execute arbitrary code.

(CVE-2008-5983)

It was discovered that the audioop module did not correctly perform input

validation. If a user or automatated system were tricked into opening a

crafted audio file, an attacker could cause a denial of service via

application crash. (CVE-2010-1634, CVE-2010-2089)

Giampaolo Rodola discovered several race conditions in the smtpd module.

A remote attacker could exploit this to cause a denial of service via

daemon outage. (CVE-2010-3493)

It was discovered that the CGIHTTPServer module did not properly perform

input validation on certain HTTP GET requests. A remote attacker ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service security issue software update Ubuntu python execution risk

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 8.04 LTS:
  python2.5                       2.5.2-2ubuntu6.2
  python2.5-minimal               2.5.2-2ubuntu6.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1613-1

CVE-2008-5983, CVE-2010-1634, CVE-2010-2089, CVE-2010-3493,

CVE-2011-1015, CVE-2011-1521, CVE-2011-4940, CVE-2011-4944,

CVE-2012-0845, CVE-2012-0876, CVE-2012-1148

Severity
critical
Lowest
Low
Medium
High
Critical

=========================================================================Ubuntu Security Notice USN-1613-1

Topics%20covered

Topics Covered

security advisory denial of service security issue software update Ubuntu python execution risk

Package Information

https://launchpad.net/ubuntu/+source/python2.5/2.5.2-2ubuntu6.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.