1. CVE-Search
  2. CVE-2007-2052
ID CVE-2007-2052
Summary Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.
References
Vulnerable Configurations
  • cpe:2.3:a:python:python:2.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:python:python:2.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:python:python:2.5.0:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 02-08-2023 - 18:04)
Impact:
Exploitability:
CWE CWE-193
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
oval via4
  • accepted 2013-04-29T04:15:27.797-04:00
    class vulnerability
    contributors
    • name Aharon Chernin
      organization SCAP.com, LLC
    • name Dragos Prisaca
      organization G2, Inc.
    definition_extensions
    • comment The operating system installed on the system is Red Hat Enterprise Linux 3
      oval oval:org.mitre.oval:def:11782
    • comment CentOS Linux 3.x
      oval oval:org.mitre.oval:def:16651
    • comment The operating system installed on the system is Red Hat Enterprise Linux 4
      oval oval:org.mitre.oval:def:11831
    • comment CentOS Linux 4.x
      oval oval:org.mitre.oval:def:16636
    • comment Oracle Linux 4.x
      oval oval:org.mitre.oval:def:15990
    • comment The operating system installed on the system is Red Hat Enterprise Linux 5
      oval oval:org.mitre.oval:def:11414
    • comment The operating system installed on the system is CentOS Linux 5.x
      oval oval:org.mitre.oval:def:15802
    • comment Oracle Linux 5.x
      oval oval:org.mitre.oval:def:15459
    description Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.
    family unix
    id oval:org.mitre.oval:def:11716
    status accepted
    submitted 2010-07-09T03:56:16-04:00
    title Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.
    version 30
  • accepted 2014-01-20T04:01:38.578-05:00
    class vulnerability
    contributors
    • name Pai Peng
      organization Hewlett-Packard
    • name Chris Coffin
      organization The MITRE Corporation
    definition_extensions
    • comment VMWare ESX Server 3.0.3 is installed
      oval oval:org.mitre.oval:def:6026
    • comment VMware ESX Server 3.5.0 is installed
      oval oval:org.mitre.oval:def:5887
    • comment VMware ESX Server 4.0 is installed
      oval oval:org.mitre.oval:def:6293
    description Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.
    family unix
    id oval:org.mitre.oval:def:8353
    status accepted
    submitted 2010-03-19T16:57:59.000-04:00
    title VMware python PyLocale_strxfrm function vulnerability
    version 7
redhat via4
advisories
  • rhsa
    id RHSA-2007:1076
  • rhsa
    id RHSA-2007:1077
  • rhsa
    id RHSA-2008:0629
rpms
  • python-0:2.2.3-6.8
  • python-0:2.3.4-14.4.el4_6.1
  • python-debuginfo-0:2.2.3-6.8
  • python-debuginfo-0:2.3.4-14.4.el4_6.1
  • python-devel-0:2.2.3-6.8
  • python-devel-0:2.3.4-14.4.el4_6.1
  • python-docs-0:2.3.4-14.4.el4_6.1
  • python-tools-0:2.2.3-6.8
  • python-tools-0:2.3.4-14.4.el4_6.1
  • tkinter-0:2.2.3-6.8
  • tkinter-0:2.3.4-14.4.el4_6.1
  • python-0:1.5.2-43.72.2
  • python-devel-0:1.5.2-43.72.2
  • python-docs-0:1.5.2-43.72.2
  • python-tools-0:1.5.2-43.72.2
  • tkinter-0:1.5.2-43.72.2
  • rhn-solaris-bootstrap-0:5.0.2-3
  • rhn_solaris_bootstrap_5_0_2_3-0:1-0
  • rhn-solaris-bootstrap-0:5.0.2-3
  • rhn_solaris_bootstrap_5_0_2_3-0:1-0
  • rhn-solaris-bootstrap-0:5.1.1-3
  • rhn_solaris_bootstrap_5_1_1_3-0:1-0
  • python-0:2.4.3-24.el5_3.6
  • python-debuginfo-0:2.4.3-24.el5_3.6
  • python-devel-0:2.4.3-24.el5_3.6
  • python-tools-0:2.4.3-24.el5_3.6
  • tkinter-0:2.4.3-24.el5_3.6
refmap via4
bid 23887
bugtraq
  • 20070521 FLEA-2007-0019-1: python
  • 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates
  • 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components
confirm
debian
  • DSA-1551
  • DSA-1620
mandriva MDKSA-2007:099
mlist [Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates
secunia
  • 25190
  • 25217
  • 25233
  • 25353
  • 25787
  • 28027
  • 28050
  • 29032
  • 29303
  • 29889
  • 31255
  • 31492
  • 37471
suse SUSE-SR:2007:013
trustix 2007-0019
ubuntu USN-585-1
vupen
  • ADV-2007-1465
  • ADV-2008-0637
  • ADV-2009-3316
xf python-localemodule-information-disclosure(34060)
statements via4
contributor Joshua Bressers
lastmodified 2007-04-19
organization Red Hat
statement Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235093 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/
Last major update 02-08-2023 - 18:04
Published 16-04-2007 - 22:19
Last modified 02-08-2023 - 18:04
Back to Top