Lucene search
HistorySep 21, 2005 - 8:03 p.m.
CVE-2005-3008
tofu
0.2
remote attackers
python code
pickled objects
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.0%
Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes.
Affected configurations
Node
amar_sagootofuMatch0.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| amar_sagoo:tofu | amar sagoo tofu | eq | 0.2 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.0%
Related for CVE-2005-3008