Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-2052
HistoryApr 16, 2007 - 12:00 a.m.

CVE-2007-2052

2007-04-1600:00:00
ubuntu.com
ubuntu.com
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.045 Low

EPSS

Percentile

92.4%

Off-by-one error in the PyLocale_strxfrm function in
Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer
size to be used for the strxfrm function, which allows context-dependent
attackers to read portions of memory via unknown manipulations that trigger
a buffer over-read due to missing null termination.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchpython2.4<Β 2.4.3-0ubuntu6.1UNKNOWN
ubuntu6.10noarchpython2.4<Β 2.4.4~c1-0ubuntu1.1UNKNOWN
ubuntu6.10noarchpython2.5<Β 2.5-2ubuntu2.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.045 Low

EPSS

Percentile

92.4%