Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Ubuntu 8.04 LTS: USN-1613-2 Critical Python 2.4 Exploits Detected

ubuntu
Calendar Grey October 17, 2012
Scroller Ubuntu
In Ubuntu, various vulnerabilities found in Python 2.4 have been resolved, detailing corrective measures for users. Following the update, precautions are advised to ensure system safety.
Several security issues were fixed in Python 2.4.

Summary

Several security issues were fixed in Python 2.4.

Software Description:

- python2.4: An interactive high-level object-oriented language (version

2.4)

Details:

USN-1613-1 fixed vulnerabilities in Python 2.5. This update provides the

corresponding updates for Python 2.4.

Original advisory details:

It was discovered that Python would prepend an empty string to sys.path

under certain circumstances. A local attacker with write access to the

current working directory could exploit this to execute arbitrary code.

(CVE-2008-5983)

It was discovered that the audioop module did not correctly perform input

validation. If a user or automatated system were tricked into opening a

crafted audio file, an attacker could cause a denial of service via

application crash. (CVE-2010-1634, CVE-2010-2089)

Giampaolo Rodola discovered several race conditions in the smtpd module.

A remote attacker could exploit this to cause a denial of service via

daemon outage. (C...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu python application exploit update caution

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 8.04 LTS:
  python2.4                       2.4.5-1ubuntu4.4
  python2.4-minimal               2.4.5-1ubuntu4.4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1613-2

https://ubuntu.com/security/notices/USN-1613-1

CVE-2008-5983, CVE-2010-1634, CVE-2010-2089, CVE-2010-3493,

CVE-2011-1015, CVE-2011-1521, CVE-2011-4940, CVE-2011-4944,

CVE-2012-0845, CVE-2012-0876, CVE-2012-1148

Severity
critical
Lowest
Low
Medium
High
Critical

=========================================================================Ubuntu Security Notice USN-1613-2

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu python application exploit update caution

Package Information

https://launchpad.net/ubuntu/+source/python2.4/2.4.5-1ubuntu4.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.