CVE-2011-4103

2014-10-2700:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

83.9%

JSON

emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not
properly deserialize YAML data, which allows remote attackers to execute
arbitrary Python code via vectors related to the yaml.load method.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/python-django-piston/+bug/884910>

OSVersionArchitecturePackageVersionFilename
ubuntu10.10noarchpython-django-piston< 0.2.2-1ubuntu0.2UNKNOWN
ubuntu11.04noarchpython-django-piston< 0.2.2-1ubuntu1.11.04.1UNKNOWN
ubuntu11.10noarchpython-django-piston< 0.2.2-1ubuntu1.11.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.10	noarch	python-django-piston	< 0.2.2-1ubuntu0.2	UNKNOWN
ubuntu	11.04	noarch	python-django-piston	< 0.2.2-1ubuntu1.11.04.1	UNKNOWN
ubuntu	11.10	noarch	python-django-piston	< 0.2.2-1ubuntu1.11.10.1	UNKNOWN