AZL-109545
Dashboard / Vulnerabilities / AZL-109545
Summary: CVE-2005-0089 affecting package python-py 1.11.0-1
Details: The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.
References: https://nvd.nist.gov/vuln/detail/CVE-2005-0089
Affected packages
Package
Name: python-py
Purl: pkg:rpm/azure-linux/python-py
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
