A flaw was found in the Python urllib and urllib2 libraries where they would not differentiate between different target URLs when handling automatic redirects. This caused Python applications using these modules to follow any new URL that they understood, including the 'file://' URL type. This could allow a remote server to force a local Python application to read a local file instead of the remote one, possibly exposing local files that were not meant to be exposed.
(CVE-2011-1521)

Multiple flaws were found in the Python audioop module. Supplying certain inputs could cause the audioop module to crash or, possibly, execute arbitrary code. (CVE-2010-1634, CVE-2010-2089)

A race condition was found in the way the Python smtpd module handled new connections. A remote user could use this flaw to cause a Python script using the smtpd module to terminate. (CVE-2010-3493)

An information disclosure flaw was found in the way the Python CGIHTTPServer module processed certain HTTP GET requests. A remote attacker could use a specially crafted request to obtain the CGI script's source code. (CVE-2011-1015)

A buffer over-read flaw was found in the way the Python Expat parser handled malformed UTF-8 sequences when processing XML files. A specially crafted XML file could cause Python applications using the Python Expat parser to crash while parsing the file. (CVE-2009-3720)

It was discovered that Python would prepend an empty string to sys.path under certain circumstances. A local attacker with write access to the current working directory could exploit this to execute arbitrary code. (CVE-2008-5983)

It was discovered that the audioop module did not correctly perform input validation. If a user or automated system were tricked into opening a crafted audio file, an attacker could cause a denial of service via application crash. (CVE-2010-1634, CVE-2010-2089)

Giampaolo Rodola discovered several race conditions in the smtpd module. A remote attacker could exploit this to cause a denial of service via daemon outage. (CVE-2010-3493)

It was discovered that the CGIHTTPServer module did not properly perform input validation on certain HTTP GET requests. A remote attacker could potentially obtain access to CGI script source files.
(CVE-2011-1015)

Niels Heinen discovered that the urllib and urllib2 modules would process Location headers that specify a redirection to file: URLs. A remote attacker could exploit this to obtain sensitive information or cause a denial of service. This issue only affected Ubuntu 11.04.
(CVE-2011-1521)

It was discovered that SimpleHTTPServer did not use a charset parameter in the Content-Type HTTP header. An attacker could potentially exploit this to conduct cross-site scripting (XSS) attacks against Internet Explorer 7 users. This issue only affected Ubuntu 11.04. (CVE-2011-4940)

It was discovered that Python distutils contained a race condition when creating the ~/.pypirc file. A local attacker could exploit this to obtain sensitive information. (CVE-2011-4944)

It was discovered that SimpleXMLRPCServer did not properly validate its input when handling HTTP POST requests. A remote attacker could exploit this to cause a denial of service via excessive CPU utilization. (CVE-2012-0845)

It was discovered that Python was susceptible to hash algorithm attacks. An attacker could cause a denial of service under certian circumstances. This update adds the '-R' command line option and honors setting the PYTHONHASHSEED environment variable to 'random' to salt str and datetime objects with an unpredictable value.
(CVE-2012-1150).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that Python would prepend an empty string to sys.path under certain circumstances. A local attacker with write access to the current working directory could exploit this to execute arbitrary code. (CVE-2008-5983)

It was discovered that the audioop module did not correctly perform input validation. If a user or automated system were tricked into opening a crafted audio file, an attacker could cause a denial of service via application crash. (CVE-2010-1634, CVE-2010-2089)

Giampaolo Rodola discovered several race conditions in the smtpd module. A remote attacker could exploit this to cause a denial of service via daemon outage. (CVE-2010-3493)

It was discovered that the CGIHTTPServer module did not properly perform input validation on certain HTTP GET requests. A remote attacker could potentially obtain access to CGI script source files.
(CVE-2011-1015)

Niels Heinen discovered that the urllib and urllib2 modules would process Location headers that specify a redirection to file: URLs. A remote attacker could exploit this to obtain sensitive information or cause a denial of service. (CVE-2011-1521)

It was discovered that SimpleHTTPServer did not use a charset parameter in the Content-Type HTTP header. An attacker could potentially exploit this to conduct cross-site scripting (XSS) attacks against Internet Explorer 7 users. (CVE-2011-4940)

It was discovered that Python distutils contained a race condition when creating the ~/.pypirc file. A local attacker could exploit this to obtain sensitive information. (CVE-2011-4944)

It was discovered that SimpleXMLRPCServer did not properly validate its input when handling HTTP POST requests. A remote attacker could exploit this to cause a denial of service via excessive CPU utilization. (CVE-2012-0845)

It was discovered that the Expat module in Python 2.5 computed hash values without restricting the ability to trigger hash collisions predictably. If a user or application using pyexpat were tricked into opening a crafted XML file, an attacker could cause a denial of service by consuming excessive CPU resources. (CVE-2012-0876)

Tim Boddy discovered that the Expat module in Python 2.5 did not properly handle memory reallocation when processing XML files. If a user or application using pyexpat were tricked into opening a crafted XML file, an attacker could cause a denial of service by consuming excessive memory resources. (CVE-2012-1148).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

From Red Hat Security Advisory 2011:0491 :

Updated python packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Python is an interpreted, interactive, object-oriented programming language.

A flaw was found in the Python urllib and urllib2 libraries where they would not differentiate between different target URLs when handling automatic redirects. This caused Python applications using these modules to follow any new URL that they understood, including the 'file://' URL type. This could allow a remote server to force a local Python application to read a local file instead of the remote one, possibly exposing local files that were not meant to be exposed.
(CVE-2011-1521)

Multiple flaws were found in the Python audioop module. Supplying certain inputs could cause the audioop module to crash or, possibly, execute arbitrary code. (CVE-2010-1634, CVE-2010-2089)

A race condition was found in the way the Python smtpd module handled new connections. A remote user could use this flaw to cause a Python script using the smtpd module to terminate. (CVE-2010-3493)

An information disclosure flaw was found in the way the Python CGIHTTPServer module processed certain HTTP GET requests. A remote attacker could use a specially crafted request to obtain the CGI script's source code. (CVE-2011-1015)

A buffer over-read flaw was found in the way the Python Expat parser handled malformed UTF-8 sequences when processing XML files. A specially crafted XML file could cause Python applications using the Python Expat parser to crash while parsing the file. (CVE-2009-3720)

This update makes Python use the system Expat library rather than its own internal copy; therefore, users must have the version of Expat shipped with RHSA-2009:1625 installed, or a later version, to resolve the CVE-2009-3720 issue.

All Python users should upgrade to these updated packages, which contain backported patches to correct these issues.

Updated python packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Python is an interpreted, interactive, object-oriented programming language.

A flaw was found in the Python urllib and urllib2 libraries where they would not differentiate between different target URLs when handling automatic redirects. This caused Python applications using these modules to follow any new URL that they understood, including the 'file://' URL type. This could allow a remote server to force a local Python application to read a local file instead of the remote one, possibly exposing local files that were not meant to be exposed.
(CVE-2011-1521)

Multiple flaws were found in the Python audioop module. Supplying certain inputs could cause the audioop module to crash or, possibly, execute arbitrary code. (CVE-2010-1634, CVE-2010-2089)

A race condition was found in the way the Python smtpd module handled new connections. A remote user could use this flaw to cause a Python script using the smtpd module to terminate. (CVE-2010-3493)

An information disclosure flaw was found in the way the Python CGIHTTPServer module processed certain HTTP GET requests. A remote attacker could use a specially crafted request to obtain the CGI script's source code. (CVE-2011-1015)

A buffer over-read flaw was found in the way the Python Expat parser handled malformed UTF-8 sequences when processing XML files. A specially crafted XML file could cause Python applications using the Python Expat parser to crash while parsing the file. (CVE-2009-3720)

This update makes Python use the system Expat library rather than its own internal copy; therefore, users must have the version of Expat shipped with RHSA-2009:1625 installed, or a later version, to resolve the CVE-2009-3720 issue.

All Python users should upgrade to these updated packages, which contain backported patches to correct these issues.

The remote Solaris system is missing necessary patches to address security updates :

  - Multiple integer overflows in audioop.c in the audioop     module in Python 2.6, 2.7, 3.1, and 3.2 allow     context-dependent attackers to cause a denial of service     (application crash) via a large fragment, as     demonstrated by a call to audioop.lin2lin with a long     string in the first argument, leading to a buffer     overflow. NOTE: this vulnerability exists because of an     incorrect fix for CVE-2008-3143.5. (CVE-2010-1634)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0027 advisory.

    - Resolves: CVE-2010-1634 CVE-2010-2089
    - Related: CVE-2008-5983
    - Rework rgbimgmodule fix for CVE-2008-3143
    - Resolves: rhbz#644425 CVE-2009-4134 CVE-2010-1449 CVE-2010-1450

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0197 advisory.

    This advisory aggregates security fixes for the python38 SRPM in CIQ LTS 8.6. It addresses 27 CVEs:
    CVE-2013-4238, CVE-2016-0772, CVE-2008-5983, CVE-2021-3177, CVE-2015-20107, and 22 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-10:01 advisory.

    Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl,     Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and     dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various     windowing systems (X11, Motif, Tk, Mac and MFC).
    Programmers can write new built-in modules for Python in C or C++. Python can be used as an extension     language for applications that need a programmable interface. This package contains most of the standard     Python modules, as well as modules for interfacing to the Tix widget set for Tk and RPM.
    Note that documentation for Python is provided in the python-docs package.
    Security issues fixed with this release:
    CVE-2008-5983     Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and     possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a     path separator, which might allow local users to execute arbitrary code via a Trojan horse Python file in     the current working directory.
    CVE-2009-4134     Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service     (application crash) via a large ZSIZE value in a black-and-white (aka B/W) RGB image that triggers an     invalid pointer dereference.
    CVE-2010-1449     Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an     unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists     because of an incomplete fix for CVE-2008-3143.12.
    CVE-2010-1450     Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to     have an unspecified impact via an image file containing crafted data that triggers improper processing     within the (1) longimagedata or (2) expandrow function.
    CVE-2010-1634     Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow     context-dependent attackers to cause a denial of service (application crash) via a large fragment, as     demonstrated by a call to audioop.lin2lin with a long string in the first argument, leading to a buffer     overflow. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3143.5.
    CVE-2010-2089     The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte     string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption     and application crash) via crafted arguments, as demonstrated by a call to audioop.reverse with a one-byte     string, a different vulnerability than CVE-2010-1634.
    Fixed bugs:
    * When starting a child process from the subprocess module in Python 2.4, the parent process could leak     file descriptors if an error occurred. This update resolves the issue.
    * Prior to Python 2.7, programs that used 'ulimit -n' to enable communication with large numbers of     subprocesses could still monitor only 1024 file descriptors at a time, which caused an exception:
    ValueError: filedescriptor out of range in select()     This was due to the subprocess module using the 'select' system call. The module now uses the 'poll'     system call, removing this limitation.
    * Prior to Python 2.5, the tarfile module failed to unpack tar files if the path was longer than 100     characters. This update backports the tarfile module from Python 2.5 and the issue no longer occurs.
    * The email module incorrectly implemented the logic for obtaining attachment file names: the     get_filename() fallback for using the deprecated 'name' parameter of the 'Content-Type' header erroneously     used the 'Content-Disposition' header. This update backports a fix from Python 2.6, which resolves this     issue.
    * Prior to version 2.5, Python's optimized memory allocator never released memory back to the system. The     memory usage of a long-running Python process would resemble a 'high-water mark'. This update backports a     fix from Python 2.5a1, which frees unused arenas, and adds a non-standard sys._debugmallocstats()     function, which prints diagnostic information to stderr. Finally, when running under Valgrind, the     optimized allocator is deactivated, to allow more convenient debugging of Python memory usage issues.
    * The urllib and urllib2 modules ignored the no_proxy variable, which could lead to programs such as 'yum'     erroneously accessing a proxy server for URLs covered by a 'no_proxy' exclusion. This has been fixed by     backporting fixes of urllib and urllib2, which respect the 'no_proxy' variable.
    Enhancements:
    * This update introduces a new python-libs package, subsuming the majority of the content of the core     python package. This makes both 32-bit and 64-bit Python libraries available on PowerPC systems.
    * The python-libs.i386 package is now available for 64-bit Itanium with the 32-bit Itanium compatibility     mode.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The following issues have been fixed :

  - a race condition in the accept() implementation of     smtpd.py could lead to a denial of service.
    (CVE-2010-3493)

  - integer overflows and insufficient size checks could     crash the audioop module. (CVE-2010-2089 /     CVE-2010-1634)

With this update of Python :

  - a race condition in the accept() implementation of     smtpd.py could lead to a denial of service.
    (CVE-2010-3493)

  - integer overflows and insufficient size checks could     crash the audioop and rgbimg modules. (CVE-2010-2089 /     CVE-2010-1634 / CVE-2009-4134 / CVE-2010-1449 /     CVE-2010-1450)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0491 advisory.

    Python is an interpreted, interactive, object-oriented programming     language.

    A flaw was found in the Python urllib and urllib2 libraries where they     would not differentiate between different target URLs when handling     automatic redirects. This caused Python applications using these modules to     follow any new URL that they understood, including the file:// URL type.
    This could allow a remote server to force a local Python application to     read a local file instead of the remote one, possibly exposing local files     that were not meant to be exposed. (CVE-2011-1521)

    Multiple flaws were found in the Python audioop module. Supplying certain     inputs could cause the audioop module to crash or, possibly, execute     arbitrary code. (CVE-2010-1634, CVE-2010-2089)

    A race condition was found in the way the Python smtpd module handled new     connections. A remote user could use this flaw to cause a Python script     using the smtpd module to terminate. (CVE-2010-3493)

    An information disclosure flaw was found in the way the Python     CGIHTTPServer module processed certain HTTP GET requests. A remote attacker     could use a specially-crafted request to obtain the CGI script's source     code. (CVE-2011-1015)

    A buffer over-read flaw was found in the way the Python Expat parser     handled malformed UTF-8 sequences when processing XML files. A     specially-crafted XML file could cause Python applications using the Python     Expat parser to crash while parsing the file. (CVE-2009-3720)

    This update makes Python use the system Expat library rather than its own     internal copy; therefore, users must have the version of Expat shipped with     RHSA-2009:1625 installed, or a later version, to resolve the CVE-2009-3720     issue.

    All Python users should upgrade to these updated packages, which contain     backported patches to correct these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote VMware ESXi 5.0 host is affected by multiple vulnerabilities :

  - A denial of service vulnerability exists in the     big2_toUtf8() function in file lib/xmltok.c in the     libexpat library. A remote attacker can exploit this,     via an XML document having malformed UTF-8 sequences, to     cause a buffer over-read, thus crashing the application.
    (CVE-2009-3560)

  - A denial of service vulnerability exists in the     updatePosition() function in file lib/xmltok.c in the     libexpat library. A remote attacker can exploit this,     via an XML document having malformed UTF-8 sequences, to     cause a buffer over-read, thus crashing the application.
    (CVE-2009-3720)

  - An integer overflow condition exists in the     BZ2_decompress() function in file decompress.c in the     bzip2 and libbzip2 library. A remote attacker can     exploit this, via a crafted compressed file, to cause     a denial of service or the execution of arbitrary code.
    (CVE-2010-0405)

  - A denial of service vulnerability exists in the audioop     module due to multiple integer overflows conditions in     file audioop.c. A remote attacker can exploit this, via     a large fragment or argument, to cause a buffer     overflow, resulting in an application crash.
    (CVE-2010-1634)

  - A denial of service vulnerability exists in the audioop     module due to a failure to verify the relationships     between size arguments and byte string length. A remote     attacker can exploit this, via crafted arguments, to     cause memory corruption, resulting in an application     crash. (CVE-2010-2089)

  - A flaw exists in the urllib and urllib2 modules due to     processing Location headers that specify redirection to     a file. A remote attacker can exploit this, via a     crafted URL, to gain sensitive information or cause a     denial of service. (CVE-2011-1521)

  - A privilege escalation vulnerability exists due to an     incorrect ACL being used for the VMware Tools folder. An     attacker on an adjacent network with access to a guest     operating system can exploit this to gain elevated     privileges on the guest operating system.
    (CVE-2012-1518)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2011-006 applied.  This update contains numerous security-related fixes for the following components :

  - Apache
  - Application Firewall
  - ATS
  - BIND
  - Certificate Trust Policy
  - CFNetwork
  - CoreFoundation
  - CoreMedia
  - File Systems
  - IOGraphics
  - iChat Server
  - Mailman
  - MediaKit
  - PHP
  - postfix
  - python
  - QuickTime
  - Tomcat
  - User Documentation
  - Web Server
  - X11

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
61033	Scientific Linux Security Update : python on SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
62436	Ubuntu 10.04 LTS / 11.04 / 11.10 : python2.6 vulnerabilities (USN-1596-1)	Nessus	Ubuntu Local Security Checks	2012/10/5	2019/9/19	medium
62619	Ubuntu 8.04 LTS : python2.5 vulnerabilities (USN-1613-1)	Nessus	Ubuntu Local Security Checks	2012/10/18	2019/9/19	medium
68270	Oracle Linux 4 : python (ELSA-2011-0491)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
53814	CentOS 4 : python (CESA-2011:0491)	Nessus	CentOS Local Security Checks	2011/5/6	2021/1/4	medium
80748	Oracle Solaris Third-Party Patch Update : python (cve_2010_1634_integer_overflow)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	medium
181052	Oracle Linux 5 : python (ELSA-2011-0027)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/22	critical
357322	Rocky Linux 8.6 [CIQ] Security Update: python38 / python38-debug / python38-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0197)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/11	critical
284342	MiracleLinux 3 : python-2.4.3-43.0.1.AXS3 (AXSA:2011-10:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	high
51134	SuSE 11 Security Update : Python (SAT Patch Number 3491)	Nessus	SuSE Local Security Checks	2010/12/12	2021/1/14	medium
51642	SuSE 10 Security Update : Python (ZYPP Patch Number 7314)	Nessus	SuSE Local Security Checks	2011/1/21	2021/1/19	high
53820	RHEL 4 : python (RHSA-2011:0491)	Nessus	Red Hat Local Security Checks	2011/5/6	2025/3/21	high
70881	ESXi 5.0 < Build 608089 Multiple Vulnerabilities (remote check)	Nessus	Misc.	2013/11/13	2018/11/15	high
56481	Mac OS X Multiple Vulnerabilities (Security Update 2011-006)	Nessus	MacOS X Local Security Checks	2011/10/13	2024/5/28	critical

检测

插件搜索

medium

medium

medium

medium

medium

medium

critical

critical

high

medium

high

high

high

critical