Lucene search
MitreCVELIST:CVE-2014-4650HistoryFeb 20, 2020 - 4:01 p.m.
CVE-2014-4650
2020-02-2016:01:22
mitre
www.cve.org
1
The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.
Related
nessus
nessus
Fedora 19 : python-2.7.5-15.fc19 (2014-14266)
2014-11-24 00:00:00
openSUSE Security Update : python3 (openSUSE-SU-2014:1042-1)
2014-08-21 00:00:00
Fedora 20 : python-2.7.5-15.fc20 (2014-14227)
2014-11-10 00:00:00
prion
prion
Directory traversal
2020-02-20 17:15:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:1005-1)
2021-06-09 00:00:00
Python CGIHTTPServer 2.7.x < 2.7.8, 3.2.x < 3.2.5, 3.3.x < 3.3.3, 3.4.x < 3.4.2 Multiple Vulnerabilities (Jun 2014) - Linux
2021-11-03 00:00:00
Fedora Update for python FEDORA-2014-14227
2014-11-10 00:00:00
securityvulns
securityvulns
[RT-SA-2014-008] Python CGIHTTPServer File Disclosure and Potential Code Execution
2014-10-15 00:00:00
python security vulnerabilities
2014-07-14 00:00:00
packetstorm
packetstorm
Python CGIHTTPServer File Disclosure / Code Execution
2014-06-27 00:00:00
exploitpack
exploitpack
Python CGIHTTPServer - Encoded Directory Traversal
2014-06-27 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: python-2.7.5-15.fc20
2014-11-09 15:47:21
[SECURITY] Fedora 19 Update: python-2.7.5-15.fc19
2014-11-22 12:44:28
[SECURITY] Fedora 20 Update: python-2.7.5-16.fc20
2015-04-22 22:41:55
nvd
nvd
CVE-2014-4650
2020-02-20 17:15:12
debiancve
debiancve
CVE-2014-4650
2020-02-20 17:15:12
ubuntucve
ubuntucve
CVE-2014-4650
2014-06-25 00:00:00
cve
cve
CVE-2014-4650
2020-02-20 17:15:12
exploitdb
exploitdb
Python CGIHTTPServer - Encoded Directory Traversal
2014-06-27 00:00:00
mageia
mageia
Updated python & python3 packages fix two vulnerabilities
2014-07-09 02:35:18
amazon
amazon
Medium: python27
2014-11-05 12:15:00
Medium: python26
2015-12-14 10:00:00
f5
f5
oraclelinux
oraclelinux
python security, bug fix, and enhancement update
2015-07-28 00:00:00
python security, bug fix, and enhancement update
2015-11-23 00:00:00
python27 security, bug fix, and enhancement update
2016-02-04 00:00:00
ibm
ibm
centos
centos
python, tkinter security update
2015-07-26 14:11:19
python, tkinter security update
2015-11-30 19:48:49
redhat
redhat
(RHSA-2015:1330) Moderate: python security, bug fix, and enhancement update
2015-07-22 00:00:00
(RHSA-2015:2101) Moderate: python security, bug fix, and enhancement update
2015-11-19 13:41:01
ubuntu
ubuntu
Python vulnerabilities
2015-06-25 00:00:00
veracode
veracode
Improper Input Validation
2019-05-02 05:39:24
Sensitive Information Leakage
2019-05-02 05:39:25
Improper Input Validation
2019-05-02 05:39:24
suse
suse
Security update for python3 (important)
2020-01-21 00:00:00