logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2011-1521

Description

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.


Affected Software


CPE Name Name Version
python:python python 2.5.2
python:python python 2.1.2
python:python python 2.3.3
python:python python 2.4.4
python:python python 2.4.2
python:python python 2.5.4
python:python python 2.4.6
python:python python 2.6.7
python:python python 2.3.2
python:python python 2.3.1
python:python python 2.4.3
python:python python 2.3.5
python:python python 2.5.1
python:python python 2.3.7
python:python python 2.1.3
python:python python 2.1
python:python python 2.2.1
python:python python 2.2.2
python:python python 2.2.3
python:python python 2.4.1
python:python python 2.0.1
python:python python 2.6.6
python:python python 2.6.5
python:python python 2.5.3
python:python python 2.6.1
python:python python 2.2
python:python python 2.3.4
python:python python 2.1.1
python:python python 2.0
python:python python 2.6.4
python:python python 2.7.1
python:python python 3.1.2
python:python python 3.0.1
python:python python 3.1
python:python python 3.2
python:python python 3.1.1
python:python python 3.0
python:python python 3.1.3
python:python python 3.2

Related