Lucene search
RootSSV:30124HistoryFeb 16, 2012 - 12:00 a.m.
Python SimpleXMLRPCServer远程拒绝服务漏洞
2012-02-1600:00:00
Root
www.seebug.org
21
0.16 Low
EPSS
Percentile
95.4%
BUGTRAQ ID: 51996
CVE ID: CVE-2012-0845
Python是一种面向对象、直译式计算机程序设计语言，也是一种功能强大的通用型语言。
Python在实现上存在远程拒绝服务漏洞，攻击者可通过特制的HTTP POST请求利用此漏洞造成拒绝服务。
此漏洞源于在处理POST请求时，"SimpleXMLRPCRequestHandler.do_POST()"方法没有正确处理EOF，可通过特制的请求导致较高的CPU消耗。
0
python 3.x
python 2.7.x
厂商补丁：
Python
目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：
$ echo -e 'POST /RPC2 HTTP/1.0\r\nContent-Length: 100\r\n\r\nlol bye' | nc localhost 12345
Related
ubuntucve
ubuntucve
CVE-2012-0845
2012-02-14 00:00:00
nessus
nessus
Amazon Linux AMI : python27 (ALAS-2012-81)
2013-09-04 00:00:00
FreeBSD : Python -- DoS via malformed XML-RPC / HTTP POST request (b4f8be9e-56b2-11e1-9fb7-003067b2972c)
2012-02-14 00:00:00
Amazon Linux AMI : python26 (ALAS-2012-80)
2013-09-04 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:41:53
Denial Of Service (DoS)
2019-05-02 04:41:53
Information Disclosure
2019-05-02 04:41:53
freebsd
freebsd
Python -- DoS via malformed XML-RPC / HTTP POST request
2012-02-13 00:00:00
openvas
openvas
FreeBSD Ports: python32
2012-03-12 00:00:00
Amazon Linux: Security Advisory (ALAS-2012-80)
2015-09-08 00:00:00
FreeBSD Ports: python32
2012-03-12 00:00:00
cve
cve
CVE-2012-0845
2012-10-05 21:55:00
amazon
amazon
Medium: python27
2012-05-21 16:52:00
Medium: python26
2012-05-21 16:50:00
Low: python26
2012-07-05 16:16:00
prion
prion
Design/Logic Flaw
2012-10-05 21:55:00
debiancve
debiancve
CVE-2012-0845
2012-10-05 21:55:00
fedora
fedora
[SECURITY] Fedora 17 Update: python-docs-2.7.3-1.fc17
2012-05-02 04:50:10
[SECURITY] Fedora 16 Update: python-docs-2.7.3-1.fc16
2012-05-06 01:26:43
[SECURITY] Fedora 16 Update: python-2.7.3-1.fc16
2012-05-06 01:26:43
centos
centos
python, tkinter security update
2012-06-18 16:35:36
redhat
redhat
(RHSA-2012:0744) Moderate: python security update
2012-06-18 00:00:00
ubuntu
ubuntu
Python 3.2 vulnerabilities
2012-10-23 00:00:00
Python 2.7 vulnerabilities
2012-10-02 00:00:00
Python 3.1 vulnerabilities
2012-10-24 00:00:00
oraclelinux
oraclelinux
python security update
2012-06-18 00:00:00
f5
f5
securityvulns
securityvulns
python multiple security vulnerabilities
2012-07-29 00:00:00
[ MDVSA-2012:096-1 ] python
2012-07-09 00:00:00
osv
osv
python2.6 - security update
2014-07-31 00:00:00
gentoo
gentoo
Python: Multiple vulnerabilities
2014-01-06 00:00:00
debian
debian
[DLA 25-1] python2.6 security update
2014-07-31 21:07:32
ibm
ibm
suse
suse
Security update for python3 (important)
2020-01-21 00:00:00