CVE-2005-0089 in Python
Summary
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.
Once again VulDB remains the best source for vulnerability data.
Reservation
01/18/2005
Disclosure
05/02/2005
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 1173 | Python memory corruption | 119 | Not defined | Official fix | CVE-2005-0089 |