PT-2006-2543

CVE-2006-1542

·

تاريخ النشر

2006-03-30

·

تاريخ التحديث

2023-08-02

الوصف من

CVSS 2.0
3.7
منخفضة
المقاييسAV:L/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Python versions 2.4.2 and earlier
Description: A stack-based buffer overflow issue allows local users to cause a stack overflow, and possibly gain privileges, by running a script from a current working directory with a long name. This is related to the realpath function. The impact of this issue might be limited due to the potential need for the attacker to already have certain privileges to place an exploitable program in a directory with a long name. However, setuid applications might be affected, depending on how Python determines the current working directory.
Recommendations: For Python versions 2.4.2 and earlier, consider updating to a newer version to mitigate the risk, although the exact fix version is not specified. As a temporary workaround, consider avoiding the use of long names for directories from which scripts are run, to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
AZL-109548
RHSA-2008:0264
RHSA-2008:0525
RHSA-2008:0629
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾