USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for the PyExpat module in Python 2.5.

Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked against Expat were tricked into opening a crafted XML file, an attacker could cause a denial of service via application crash.
(CVE-2009-2625, CVE-2009-3720)

It was discovered that Expat did not properly process malformed UTF-8 sequences. If a user or application linked against Expat were tricked into opening a crafted XML file, an attacker could cause a denial of service via application crash. (CVE-2009-3560).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Jan Lieskovsky discovered an error in expat, an XML parsing C library, when parsing certain UTF-8 sequences, which can be exploited to crash an application using the library.

This update of python has a copy of libxmlrpc that is vulnerable to denial of service bugs that can occur while processing malformed XML input.

  - CVSS v2 Base Score: 5.0 (moderate)     (AV:N/AC:L/Au:N/C:N/I:N/A:P): Permissions, Privileges,     and Access Control (CWE-264). (CVE-2009-2625)

  - CVSS v2 Base Score: 5.0 (MEDIUM)     (AV:N/AC:L/Au:N/C:N/I:N/A:P): Insufficient Information     (CWE-noinfo). (CVE-2009-3720)

  - CVSS v2 Base Score: 5.0 (MEDIUM)     (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119).
    (CVE-2009-3560)

This update of python has a copy of libxmlrpc that is vulnerable to denial of service bugs that can occur while processing malformed XML input. CVE-2009-2625: CVSS v2 Base Score: 5.0 (moderate) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Permissions, Privileges, and Access Control (CWE-264) CVE-2009-3720: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Insufficient Information (CWE-noinfo) CVE-2009-3560: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119)

This update of libxmlrpc is not vulnerable to denial of service bugs that can occur while processing malformed XML input.

  - CVSS v2 Base Score: 5.0 (moderate)     (AV:N/AC:L/Au:N/C:N/I:N/A:P): Permissions, Privileges,     and Access Control (CWE-264). (CVE-2009-2625)

  - CVSS v2 Base Score: 5.0 (MEDIUM)     (AV:N/AC:L/Au:N/C:N/I:N/A:P): Insufficient Information     (CWE-noinfo). (CVE-2009-3720)

  - CVSS v2 Base Score: 5.0 (MEDIUM)     (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119).
    (CVE-2009-3560)

Specially crafted XML documents could make pyxml run into an enless loop, therefore locking up applications using pyxml. (CVE-2009-3720 / CVE-2009-3560)

This update of libxmlrpc is not vulnerable anymore to denial of service bugs that can occur while processing malformed XML input.

  - CVE-2009-3720: CVSS v2 Base Score: 5.0 (MEDIUM)     (AV:N/AC:L/Au:N/C:N/I:N/A:P): Insufficient Information     (CWE-noinfo) CVE-2009-3560: CVSS v2 Base Score: 5.0     (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors.
    (CWE-119). (CVE-2009-2625: CVSS v2 Base Score: 5.0     (moderate) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Permissions,     Privileges, and Access Control (CWE-264))

The remote host is affected by the vulnerability described in GLSA-201209-06 (Expat: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Expat. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted XML       file in an application linked against Expat, possibly resulting in a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

According to its banner, the version of Apache 2.0.x running on the remote host is prior to 2.0.64. It is, therefore, affected by the following vulnerabilities :

  - An unspecified error exists in the handling of requests     without a path segment. (CVE-2010-1452)

  - Several modules, including 'mod_deflate', are     vulnerable to a denial of service attack as the     server can be forced to utilize CPU time compressing     a large file after client disconnect. (CVE-2009-1891)

  - An unspecified error exists in 'mod_proxy' related to     filtration of authentication credentials.     (CVE-2009-3095)  
  - A NULL pointer dereference issue exists in     'mod_proxy_ftp' in some error handling paths.
    (CVE-2009-3094)

  - An error exists in 'mod_ssl' making the server     vulnerable to the TLC renegotiation prefix injection     attack. (CVE-2009-3555)

  - An error exists in the handling of subrequests such     that the parent request headers may be corrupted.
    (CVE-2010-0434)

  - An error exists in 'mod_proxy_http' when handling excessive     interim responses making it vulnerable to a denial of     service attack. (CVE-2008-2364)

  - An error exists in 'mod_isapi' that allows the module     to be unloaded too early, which leaves orphaned callback     pointers. (CVE-2010-0425)

  - An error exists in 'mod_proxy_ftp' when wildcards are     in an FTP URL, which allows for cross-site scripting     attacks. (CVE-2008-2939)

Note that the remote web server may not actually be affected by these vulnerabilities.  Nessus did not try to determine whether the affected modules are in use or to check for the issues themselves.

According to its banner, the version of Apache 2.2.x running on the remote host is prior to 2.2.17. It is, therefore, affected by the following vulnerabilities :

  - Errors exist in the bundled expat library that may allow     an attacker to crash the server when a buffer is over-     read when parsing an XML document. (CVE-2009-3720 and     CVE-2009-3560)

  - An error exists in the 'apr_brigade_split_line'     function in the bundled APR-util library. Carefully     timed bytes in requests result in gradual memory     increases leading to a denial of service.     (CVE-2010-1623)  Note that the remote web server may not actually be affected by these vulnerabilities. Nessus did not try to determine whether the affected modules are in use or to check for the issues themselves.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
44115	Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : python2.5 vulnerabilities (USN-890-2)	Nessus	Ubuntu Local Security Checks	2010/1/22	2019/9/19	medium
44818	Debian DSA-1953-1 : expat - denial of service	Nessus	Debian Local Security Checks	2010/2/24	2021/1/4	medium
46335	SuSE9 Security Update : Python (YOU Patch Number 12600)	Nessus	SuSE Local Security Checks	2010/5/14	2021/1/14	medium
46343	openSUSE Security Update : libpython2_6-1_0 (openSUSE-SU-2010:0247-1)	Nessus	SuSE Local Security Checks	2010/5/15	2021/1/14	medium
47107	SuSE9 Security Update : xmlrpc-c (YOU Patch Number 12591)	Nessus	SuSE Local Security Checks	2010/6/22	2021/1/14	medium
49923	SuSE 10 Security Update : pyxml (ZYPP Patch Number 6715)	Nessus	SuSE Local Security Checks	2010/10/11	2021/1/14	medium
51753	SuSE 10 Security Update : libxmlrpc (ZYPP Patch Number 6857)	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	medium
51754	SuSE 10 Security Update : libxmlrpc (ZYPP Patch Number 6862)	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	medium
62287	GLSA-201209-06 : Expat: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2012/9/25	2021/1/6	medium
50069	Apache 2.0.x < 2.0.64 Multiple Vulnerabilities	Nessus	Web Servers	2010/10/20	2018/6/29	high
50070	Apache 2.2.x < 2.2.17 Multiple Vulnerabilities	Nessus	Web Servers	2010/10/20	2018/6/29	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium