6.4

CVE-2011-1521

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.

Data is provided by the National Vulnerability Database (NVD)
Python ≫ Python Version2.0
Python ≫ Python Version2.0.1
Python ≫ Python Version2.1
Python ≫ Python Version2.1.1
Python ≫ Python Version2.1.2
Python ≫ Python Version2.1.3
Python ≫ Python Version2.2
Python ≫ Python Version2.2.1
Python ≫ Python Version2.2.2
Python ≫ Python Version2.2.3
Python ≫ Python Version2.3.1
Python ≫ Python Version2.3.2
Python ≫ Python Version2.3.3
Python ≫ Python Version2.3.4
Python ≫ Python Version2.3.5
Python ≫ Python Version2.3.7
Python ≫ Python Version2.4.1
Python ≫ Python Version2.4.2
Python ≫ Python Version2.4.3
Python ≫ Python Version2.4.4
Python ≫ Python Version2.4.6
Python ≫ Python Version2.5.1
Python ≫ Python Version2.5.2
Python ≫ Python Version2.5.3
Python ≫ Python Version2.5.4
Python ≫ Python Version2.6.1
Python ≫ Python Version2.6.4
Python ≫ Python Version2.6.5
Python ≫ Python Version2.6.6
Python ≫ Python Version2.6.7
Python ≫ Python Version2.7.1
Python ≫ Python Version3.0
Python ≫ Python Version3.0.1
Python ≫ Python Version3.1
Python ≫ Python Version3.1.1
Python ≫ Python Version3.1.2
Python ≫ Python Version3.1.3
Python ≫ Python Version3.2
Python ≫ Python Version3.2 Updatealpha
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.9% 0.826
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:N/A:P