CVE-2011-4212

CVE-2011-4212 describes a vulnerability in the Google App Engine Python SDK sandbox prior to 1.5.4. The sandbox does not properly prevent os.popen calls, allowing a local attacker with access to bypass access restrictions and execute arbitrary commands via a dev_appserver.RestrictedPathFunction._...