Python 2.6 vulnerability

2013-10-0100:00:00

ubuntu.com

8.7 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

57.1%

JSON

Releases

Ubuntu 10.04

Packages

python2.6 - An interactive high-level object-oriented language

Details

Ryan Sleevi discovered that Python did not properly handle certificates
with NULL characters in the Subject Alternative Name field. An attacker
could exploit this to perform a machine-in-the-middle attack to view sensitive
information or alter encrypted communications.

OSVersionArchitecturePackageVersionFilename
Ubuntu10.04noarchpython2.6< 2.6.5-1ubuntu6.2UNKNOWN
Ubuntu10.04noarchlibpython2.6< 2.6.5-1ubuntu6.2UNKNOWN
Ubuntu10.04noarchpython2.6-dbg< 2.6.5-1ubuntu6.2UNKNOWN
Ubuntu10.04noarchpython2.6-dev< 2.6.5-1ubuntu6.2UNKNOWN
Ubuntu10.04noarchpython2.6-minimal< 2.6.5-1ubuntu6.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	10.04	noarch	python2.6	< 2.6.5-1ubuntu6.2	UNKNOWN
Ubuntu	10.04	noarch	libpython2.6	< 2.6.5-1ubuntu6.2	UNKNOWN
Ubuntu	10.04	noarch	python2.6-dbg	< 2.6.5-1ubuntu6.2	UNKNOWN
Ubuntu	10.04	noarch	python2.6-dev	< 2.6.5-1ubuntu6.2	UNKNOWN
Ubuntu	10.04	noarch	python2.6-minimal	< 2.6.5-1ubuntu6.2	UNKNOWN