Lucene search

[email protected]NVD:CVE-2009-0367

HistoryMar 05, 2009 - 2:30 a.m.

CVE-2009-0367

2009-03-0502:30:00

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.415

Percentile

97.3%

JSON

The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module.

Affected configurations

Nvd

Node

wesnothwesnothMatch1.4

wesnothwesnothMatch1.4.1

wesnothwesnothMatch1.4.2

wesnothwesnothMatch1.4.3

wesnothwesnothMatch1.4.4

wesnothwesnothMatch1.4.5

wesnothwesnothMatch1.4.6

wesnothwesnothMatch1.4.7

wesnothwesnothMatch1.5.0

wesnothwesnothMatch1.5.1

wesnothwesnothMatch1.5.2

wesnothwesnothMatch1.5.3

wesnothwesnothMatch1.5.4

wesnothwesnothMatch1.5.5

wesnothwesnothMatch1.5.6

wesnothwesnothMatch1.5.7

wesnothwesnothMatch1.5.8

wesnothwesnothMatch1.5.9

wesnothwesnothMatch1.5.10

VendorProductVersionCPE
wesnothwesnoth1.4cpe:2.3:a:wesnoth:wesnoth:1.4:*:*:*:*:*:*:*
wesnothwesnoth1.4.1cpe:2.3:a:wesnoth:wesnoth:1.4.1:*:*:*:*:*:*:*
wesnothwesnoth1.4.2cpe:2.3:a:wesnoth:wesnoth:1.4.2:*:*:*:*:*:*:*
wesnothwesnoth1.4.3cpe:2.3:a:wesnoth:wesnoth:1.4.3:*:*:*:*:*:*:*
wesnothwesnoth1.4.4cpe:2.3:a:wesnoth:wesnoth:1.4.4:*:*:*:*:*:*:*
wesnothwesnoth1.4.5cpe:2.3:a:wesnoth:wesnoth:1.4.5:*:*:*:*:*:*:*
wesnothwesnoth1.4.6cpe:2.3:a:wesnoth:wesnoth:1.4.6:*:*:*:*:*:*:*
wesnothwesnoth1.4.7cpe:2.3:a:wesnoth:wesnoth:1.4.7:*:*:*:*:*:*:*
wesnothwesnoth1.5.0cpe:2.3:a:wesnoth:wesnoth:1.5.0:*:*:*:*:*:*:*
wesnothwesnoth1.5.1cpe:2.3:a:wesnoth:wesnoth:1.5.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wesnoth	wesnoth	1.4	cpe:2.3:a:wesnoth:wesnoth:1.4:::::::*
wesnoth	wesnoth	1.4.1	cpe:2.3:a:wesnoth:wesnoth:1.4.1:::::::*
wesnoth	wesnoth	1.4.2	cpe:2.3:a:wesnoth:wesnoth:1.4.2:::::::*
wesnoth	wesnoth	1.4.3	cpe:2.3:a:wesnoth:wesnoth:1.4.3:::::::*
wesnoth	wesnoth	1.4.4	cpe:2.3:a:wesnoth:wesnoth:1.4.4:::::::*
wesnoth	wesnoth	1.4.5	cpe:2.3:a:wesnoth:wesnoth:1.4.5:::::::*
wesnoth	wesnoth	1.4.6	cpe:2.3:a:wesnoth:wesnoth:1.4.6:::::::*
wesnoth	wesnoth	1.4.7	cpe:2.3:a:wesnoth:wesnoth:1.4.7:::::::*
wesnoth	wesnoth	1.5.0	cpe:2.3:a:wesnoth:wesnoth:1.5.0:::::::*
wesnoth	wesnoth	1.5.1	cpe:2.3:a:wesnoth:wesnoth:1.5.1:::::::*