Detections
Analytics
Debian DSA-1667-1 : python2.4 - several vulnerabilities
high Nessus Plugin ID 34823
Synopsis
The remote Debian host is missing a security-related update.Description
Several vulnerabilities have been discovered in the interpreter for the Python language. The Common Vulnerabilities and Exposures project identifies the following problems :- CVE-2008-2315 David Remahl discovered several integer overflows in the stringobject, unicodeobject, bufferobject, longobject, tupleobject, stropmodule, gcmodule, and mmapmodule modules.
- CVE-2008-3142 Justin Ferguson discovered that incorrect memory allocation in the unicode_resize() function can lead to buffer overflows.
- CVE-2008-3143 Several integer overflows were discovered in various Python core modules.
- CVE-2008-3144 Several integer overflows were discovered in the PyOS_vsnprintf() function.
Solution
Upgrade the python2.4 packages.For the stable distribution (etch), these problems have been fixed in version 2.4.4-3+etch2.
See Also
https://security-tracker.debian.org/tracker/CVE-2008-2315
https://security-tracker.debian.org/tracker/CVE-2008-3142
https://security-tracker.debian.org/tracker/CVE-2008-3143
Plugin Details
Severity: High
ID: 34823
File Name: debian_DSA-1667.nasl
Version: 1.13
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 11/21/2008
Updated: 1/4/2021
Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:debian:debian_linux:python2.4, cpe:/o:debian:debian_linux:4.0
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Patch Publication Date: 11/19/2008
Reference Information
CVE: CVE-2008-2315, CVE-2008-3142, CVE-2008-3143, CVE-2008-3144