Python 'expandtabs' Multiple Integer Overflow Vulnerabilities

Bugtraq ID:	33187
Class:	Boundary Condition Error
CVE:	CVE-2008-5031
Remote:	Yes
Local:	No
Published:	Nov 05 2008 12:00AM
Updated:	Mar 19 2015 09:06AM
Credit:	These issues were disclosed by the vendor.
Vulnerable:	VMWare vMA 4.0 VMWare ESX Server 3.0.3 VMWare ESX Server 3.0.2 VMWare ESX Server 3.0.1 VMWare ESX Server 3.0 VMWare ESX Server 2.5.5 VMWare ESX Server 4.0 VMWare ESX Server 3.5 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise SDK 10 SP2 SuSE SUSE Linux Enterprise Desktop 10 SP2 SuSE openSUSE 10.3 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux POS 9 S.u.S.E. Novell Linux Desktop 9.0 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux Desktop Workstation 5 client RedHat Enterprise Linux Desktop version 4 RedHat Desktop 3.0 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux AS 4 Red Hat Enterprise Linux AS 3 Red Hat Enterprise Linux 5 Server Python Software Foundation Python 2.5.1 Python Software Foundation Python 2.4.5 Python Software Foundation Python 2.4.4 -r14 Python Software Foundation Python 2.4.4 Python Software Foundation Python 2.4.3 + Trustix Secure Linux 3.0.5 Python Software Foundation Python 2.4.2 Python Software Foundation Python 2.4.1 Python Software Foundation Python 2.4 Python Software Foundation Python 2.3.6 Python Software Foundation Python 2.3.5 Python Software Foundation Python 2.3.4 Python Software Foundation Python 2.3.3 Python Software Foundation Python 2.3.2 Python Software Foundation Python 2.3.1 Python Software Foundation Python 2.3 b1 Python Software Foundation Python 2.3 Python Software Foundation Python 2.2.3 + Red Hat Enterprise Linux AS 3 + RedHat Desktop 3.0 + RedHat Enterprise Linux ES 3 + RedHat Enterprise Linux WS 3 + Ubuntu Ubuntu Linux 4.1 ppc + Ubuntu Ubuntu Linux 4.1 ia64 + Ubuntu Ubuntu Linux 4.1 ia32 Python Software Foundation Python 2.2.2 + OpenPKG OpenPKG 1.2 + OpenPKG OpenPKG 1.2 + RedHat Linux 7.3 + RedHat Linux 7.3 + S.u.S.E. Linux Personal 8.2 + S.u.S.E. Linux Personal 8.2 Python Software Foundation Python 2.2.1 Python Software Foundation Python 2.2 + Conectiva Linux 8.0 + Mandriva Linux Mandrake 8.2 ppc + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 Python Software Foundation Python 2.1.3 + Debian Linux 3.0 Python Software Foundation Python 2.1.2 Python Software Foundation Python 2.1.1 Python Software Foundation Python 2.1 Python Software Foundation Python 2.0.1 Python Software Foundation Python 2.0 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 Python Software Foundation Python 1.6.1 Python Software Foundation Python 1.6 Python Software Foundation Python 1.5.2 Python Software Foundation Python 2.5 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Gentoo Linux Avaya Message Networking 3.1 Avaya Intuity AUDIX LX 2.0 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5
Not Vulnerable:	VMWare vMA 4.0 Patch 2 Python Software Foundation Python 2.5.2

Python 'expandtabs' Multiple Integer Overflow Vulnerabilities

Python is prone to multiple integer-overflow vulnerabilities.

Successful exploits may allow attackers to execute arbitrary code in the context of applications using the vulnerable Python module. This may result in a compromise of the underlying system. Failed attempts may lead to a denial-of-service condition.

These issues affect versions prior to Python 2.5.2.

Python 'expandtabs' Multiple Integer Overflow Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Python 'expandtabs' Multiple Integer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu idle-python2.4_2.4.5-1ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/python2.4/idle-pytho n2.4_2.4.5-1ubuntu4.2_all.deb


• Ubuntu idle-python2.5_2.5.2-2ubuntu6_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/python2.5/idle-pytho n2.5_2.5.2-2ubuntu6_all.deb


• Ubuntu python2.4-dbg_2.4.5-1ubuntu4.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dbg_2.4.5-1ubu ntu4.2_powerpc.deb


• Ubuntu python2.4-dev_2.4.5-1ubuntu4.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dev_2.4.5-1ubu ntu4.2_powerpc.deb


• Ubuntu python2.4-doc_2.4.5-1ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-doc_ 2.4.5-1ubuntu4.2_all.deb


• Ubuntu python2.4-examples_2.4.5-1ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-exam ples_2.4.5-1ubuntu4.2_all.deb


• Ubuntu python2.4-minimal_2.4.5-1ubuntu4.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-minimal_2.4.5- 1ubuntu4.2_powerpc.deb


• Ubuntu python2.4_2.4.5-1ubuntu4.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4_2.4.5-1ubuntu4 .2_powerpc.deb


• Ubuntu python2.5-dbg_2.5.2-2ubuntu6_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/python2.5/python2.5-dbg_2.5.2-2ubu ntu6_powerpc.deb


• Ubuntu python2.5-dev_2.5.2-2ubuntu6_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/python2.5/python2.5-dev_2.5.2-2ubu ntu6_powerpc.deb


• Ubuntu python2.5-doc_2.5.2-2ubuntu6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.5/python2.5-doc_ 2.5.2-2ubuntu6_all.deb


• Ubuntu python2.5-examples_2.5.2-2ubuntu6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.5/python2.5-exam ples_2.5.2-2ubuntu6_all.deb


• Ubuntu python2.5-minimal_2.5.2-2ubuntu6_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/python2.5/python2.5-minimal_2.5.2- 2ubuntu6_powerpc.deb


• Ubuntu python2.5_2.5.2-2ubuntu6_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/python2.5/python2.5_2.5.2-2ubuntu6 _powerpc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu idle-python2.4_2.4.5-5ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/python2.4/idle-pytho n2.4_2.4.5-5ubuntu1.1_all.deb


• Ubuntu python2.4-dbg_2.4.5-5ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dbg_2.4.5-5ubu ntu1.1_powerpc.deb


• Ubuntu python2.4-dev_2.4.5-5ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dev_2.4.5-5ubu ntu1.1_powerpc.deb


• Ubuntu python2.4-doc_2.4.5-5ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-doc_ 2.4.5-5ubuntu1.1_all.deb


• Ubuntu python2.4-examples_2.4.5-5ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-exam ples_2.4.5-5ubuntu1.1_all.deb


• Ubuntu python2.4-minimal_2.4.5-5ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-minimal_2.4.5- 5ubuntu1.1_powerpc.deb


• Ubuntu python2.4_2.4.5-5ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4_2.4.5-5ubuntu1 .1_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu idle-python2.4_2.4.5-1ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/python2.4/idle-pytho n2.4_2.4.5-1ubuntu4.2_all.deb


• Ubuntu idle-python2.5_2.5.2-2ubuntu6_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/python2.5/idle-pytho n2.5_2.5.2-2ubuntu6_all.deb


• Ubuntu python2.4-dbg_2.4.5-1ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dbg_2.4.5-1ubu ntu4.2_sparc.deb


• Ubuntu python2.4-dev_2.4.5-1ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dev_2.4.5-1ubu ntu4.2_sparc.deb


• Ubuntu python2.4-doc_2.4.5-1ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-doc_ 2.4.5-1ubuntu4.2_all.deb


• Ubuntu python2.4-examples_2.4.5-1ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-exam ples_2.4.5-1ubuntu4.2_all.deb


• Ubuntu python2.4-minimal_2.4.5-1ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-minimal_2.4.5- 1ubuntu4.2_sparc.deb


• Ubuntu python2.4_2.4.5-1ubuntu4.2_sparc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4_2.4.5-1ubuntu4 .2_sparc.deb


• Ubuntu python2.5-dbg_2.5.2-2ubuntu6_sparc.deb
  http://ports.ubuntu.com/pool/main/p/python2.5/python2.5-dbg_2.5.2-2ubu ntu6_sparc.deb


• Ubuntu python2.5-dev_2.5.2-2ubuntu6_sparc.deb
  http://ports.ubuntu.com/pool/main/p/python2.5/python2.5-dev_2.5.2-2ubu ntu6_sparc.deb


• Ubuntu python2.5-doc_2.5.2-2ubuntu6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.5/python2.5-doc_ 2.5.2-2ubuntu6_all.deb


• Ubuntu python2.5-examples_2.5.2-2ubuntu6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.5/python2.5-exam ples_2.5.2-2ubuntu6_all.deb


• Ubuntu python2.5-minimal_2.5.2-2ubuntu6_sparc.deb
  http://ports.ubuntu.com/pool/main/p/python2.5/python2.5-minimal_2.5.2- 2ubuntu6_sparc.deb


• Ubuntu python2.5_2.5.2-2ubuntu6_sparc.deb
  http://ports.ubuntu.com/pool/main/p/python2.5/python2.5_2.5.2-2ubuntu6 _sparc.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu idle-python2.4_2.4.3-0ubuntu6.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/idle-python2.4 _2.4.3-0ubuntu6.3_all.deb


• Ubuntu python2.4-dbg_2.4.3-0ubuntu6.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dbg_ 2.4.3-0ubuntu6.3_sparc.deb


• Ubuntu python2.4-dev_2.4.3-0ubuntu6.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dev_ 2.4.3-0ubuntu6.3_sparc.deb


• Ubuntu python2.4-doc_2.4.3-0ubuntu6.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-doc_ 2.4.3-0ubuntu6.3_all.deb


• Ubuntu python2.4-examples_2.4.3-0ubuntu6.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-exam ples_2.4.3-0ubuntu6.3_all.deb


• Ubuntu python2.4-gdbm_2.4.3-0ubuntu6.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-gdbm _2.4.3-0ubuntu6.3_sparc.deb


• Ubuntu python2.4-minimal_2.4.3-0ubuntu6.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-mini mal_2.4.3-0ubuntu6.3_sparc.deb


• Ubuntu python2.4-tk_2.4.3-0ubuntu6.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-tk_2 .4.3-0ubuntu6.3_sparc.deb


• Ubuntu python2.4_2.4.3-0ubuntu6.3_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4. 3-0ubuntu6.3_sparc.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu idle-python2.4_2.4.5-1ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/python2.4/idle-pytho n2.4_2.4.5-1ubuntu4.2_all.deb


• Ubuntu idle-python2.5_2.5.2-2ubuntu6_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/python2.5/idle-pytho n2.5_2.5.2-2ubuntu6_all.deb


• Ubuntu python2.4-dbg_2.4.5-1ubuntu4.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dbg_ 2.4.5-1ubuntu4.2_amd64.deb


• Ubuntu python2.4-dev_2.4.5-1ubuntu4.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dev_ 2.4.5-1ubuntu4.2_amd64.deb


• Ubuntu python2.4-doc_2.4.5-1ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-doc_ 2.4.5-1ubuntu4.2_all.deb


• Ubuntu python2.4-examples_2.4.5-1ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-exam ples_2.4.5-1ubuntu4.2_all.deb


• Ubuntu python2.4-minimal_2.4.5-1ubuntu4.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-mini mal_2.4.5-1ubuntu4.2_amd64.deb


• Ubuntu python2.4_2.4.5-1ubuntu4.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4. 5-1ubuntu4.2_amd64.deb


• Ubuntu python2.5-dbg_2.5.2-2ubuntu6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.5/python2.5-dbg_ 2.5.2-2ubuntu6_amd64.deb


• Ubuntu python2.5-dev_2.5.2-2ubuntu6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.5/python2.5-dev_ 2.5.2-2ubuntu6_amd64.deb


• Ubuntu python2.5-doc_2.5.2-2ubuntu6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.5/python2.5-doc_ 2.5.2-2ubuntu6_all.deb


• Ubuntu python2.5-examples_2.5.2-2ubuntu6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.5/python2.5-exam ples_2.5.2-2ubuntu6_all.deb


• Ubuntu python2.5-minimal_2.5.2-2ubuntu6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.5/python2.5-mini mal_2.5.2-2ubuntu6_amd64.deb


• Ubuntu python2.5_2.5.2-2ubuntu6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.5/python2.5_2.5. 2-2ubuntu6_amd64.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu idle-python2.4_2.4.5-5ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/python2.4/idle-pytho n2.4_2.4.5-5ubuntu1.1_all.deb


• Ubuntu python2.4-dbg_2.4.5-5ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dbg_2.4.5-5ubu ntu1.1_sparc.deb


• Ubuntu python2.4-dev_2.4.5-5ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dev_2.4.5-5ubu ntu1.1_sparc.deb


• Ubuntu python2.4-doc_2.4.5-5ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-doc_ 2.4.5-5ubuntu1.1_all.deb


• Ubuntu python2.4-examples_2.4.5-5ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-exam ples_2.4.5-5ubuntu1.1_all.deb


• Ubuntu python2.4-minimal_2.4.5-5ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-minimal_2.4.5- 5ubuntu1.1_sparc.deb


• Ubuntu python2.4_2.4.5-5ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4_2.4.5-5ubuntu1 .1_sparc.deb

VMWare ESX Server 4.0

• VMWare ESX-4.0.0-update01.zip
  https://hostupdate.vmware.com/software/VUM/OFFLINE/release-158-2009111 8-187517/ESX-4.0.0-update01.zip

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu idle-python2.4_2.4.5-5ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/python2.4/idle-pytho n2.4_2.4.5-5ubuntu1.1_all.deb


• Ubuntu python2.4-dbg_2.4.5-5ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dbg_ 2.4.5-5ubuntu1.1_amd64.deb


• Ubuntu python2.4-dev_2.4.5-5ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dev_ 2.4.5-5ubuntu1.1_amd64.deb


• Ubuntu python2.4-doc_2.4.5-5ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-doc_ 2.4.5-5ubuntu1.1_all.deb


• Ubuntu python2.4-examples_2.4.5-5ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-exam ples_2.4.5-5ubuntu1.1_all.deb


• Ubuntu python2.4-minimal_2.4.5-5ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-mini mal_2.4.5-5ubuntu1.1_amd64.deb


• Ubuntu python2.4_2.4.5-5ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4. 5-5ubuntu1.1_amd64.deb

VMWare ESX Server 3.5

• VMWare ESX350-201002402-SG.zip
  http://download3.vmware.com/software/vi/ESX350-201002402-SG.zip

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu idle-python2.4_2.4.5-5ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/python2.4/idle-pytho n2.4_2.4.5-5ubuntu1.1_all.deb


• Ubuntu python2.4-dbg_2.4.5-5ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dbg_ 2.4.5-5ubuntu1.1_i386.deb


• Ubuntu python2.4-dev_2.4.5-5ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dev_ 2.4.5-5ubuntu1.1_i386.deb


• Ubuntu python2.4-doc_2.4.5-5ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-doc_ 2.4.5-5ubuntu1.1_all.deb


• Ubuntu python2.4-examples_2.4.5-5ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-exam ples_2.4.5-5ubuntu1.1_all.deb


• Ubuntu python2.4-minimal_2.4.5-5ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-mini mal_2.4.5-5ubuntu1.1_i386.deb


• Ubuntu python2.4_2.4.5-5ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4. 5-5ubuntu1.1_i386.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu idle-python2.4_2.4.3-0ubuntu6.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/idle-python2.4 _2.4.3-0ubuntu6.3_all.deb


• Ubuntu python2.4-dbg_2.4.3-0ubuntu6.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dbg_ 2.4.3-0ubuntu6.3_powerpc.deb


• Ubuntu python2.4-dev_2.4.3-0ubuntu6.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-dev_ 2.4.3-0ubuntu6.3_powerpc.deb


• Ubuntu python2.4-doc_2.4.3-0ubuntu6.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-doc_ 2.4.3-0ubuntu6.3_all.deb


• Ubuntu python2.4-examples_2.4.3-0ubuntu6.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-exam ples_2.4.3-0ubuntu6.3_all.deb


• Ubuntu python2.4-gdbm_2.4.3-0ubuntu6.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-gdbm _2.4.3-0ubuntu6.3_powerpc.deb


• Ubuntu python2.4-minimal_2.4.3-0ubuntu6.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-mini mal_2.4.3-0ubuntu6.3_powerpc.deb


• Ubuntu python2.4-tk_2.4.3-0ubuntu6.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-tk_2 .4.3-0ubuntu6.3_powerpc.deb


• Ubuntu python2.4_2.4.3-0ubuntu6.3_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4_2.4. 3-0ubuntu6.3_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu idle-python2.4_2.4.5-1ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/python2.4/idle-pytho n2.4_2.4.5-1ubuntu4.2_all.deb


• Ubuntu idle-python2.5_2.5.2-2ubuntu6_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/python2.5/idle-pytho n2.5_2.5.2-2ubuntu6_all.deb


• Ubuntu python2.4-dbg_2.4.5-1ubuntu4.2_lpia.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dbg_2.4.5-1ubu ntu4.2_lpia.deb


• Ubuntu python2.4-dev_2.4.5-1ubuntu4.2_lpia.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-dev_2.4.5-1ubu ntu4.2_lpia.deb


• Ubuntu python2.4-doc_2.4.5-1ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-doc_ 2.4.5-1ubuntu4.2_all.deb


• Ubuntu python2.4-examples_2.4.5-1ubuntu4.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.4/python2.4-exam ples_2.4.5-1ubuntu4.2_all.deb


• Ubuntu python2.4-minimal_2.4.5-1ubuntu4.2_lpia.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4-minimal_2.4.5- 1ubuntu4.2_lpia.deb


• Ubuntu python2.4_2.4.5-1ubuntu4.2_lpia.deb
  http://ports.ubuntu.com/pool/main/p/python2.4/python2.4_2.4.5-1ubuntu4 .2_lpia.deb


• Ubuntu python2.5-dbg_2.5.2-2ubuntu6_lpia.deb
  http://ports.ubuntu.com/pool/main/p/python2.5/python2.5-dbg_2.5.2-2ubu ntu6_lpia.deb


• Ubuntu python2.5-dev_2.5.2-2ubuntu6_lpia.deb
  http://ports.ubuntu.com/pool/main/p/python2.5/python2.5-dev_2.5.2-2ubu ntu6_lpia.deb


• Ubuntu python2.5-doc_2.5.2-2ubuntu6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.5/python2.5-doc_ 2.5.2-2ubuntu6_all.deb


• Ubuntu python2.5-examples_2.5.2-2ubuntu6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/python2.5/python2.5-exam ples_2.5.2-2ubuntu6_all.deb


• Ubuntu python2.5-minimal_2.5.2-2ubuntu6_lpia.deb
  http://ports.ubuntu.com/pool/main/p/python2.5/python2.5-minimal_2.5.2- 2ubuntu6_lpia.deb


• Ubuntu python2.5_2.5.2-2ubuntu6_lpia.deb
  http://ports.ubuntu.com/pool/main/p/python2.5/python2.5_2.5.2-2ubuntu6 _lpia.deb

Apple Mac OS X 10.4.11

• Apple SecUpd2009-001Intel.dmg
  for Intel
  http://support.apple.com/downloads/Security_Update_2009_001__Tiger_Int el_


• Apple SecUpd2009-001PPC.dmg
  for PPC
  http://support.apple.com/downloads/Security_Update_2009_001__Tiger_PPC _

Apple Mac OS X Server 10.4.11

• Apple SecUpdSrvr2009-001PPC.dmg
  for PPC
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Ti ger_PPC_


• Apple SecUpdSrvr2009-001Univ.dmg
  Universal
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Un iversal_

Apple Mac OS X 10.5.6

• Apple SecUpd2009-001.dmg
  http://support.apple.com/downloads/Security_Update_2009_001__Leopard_

Apple Mac OS X Server 10.5.6

• Apple SecUpdSrvr2009-001.dmg
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Le opard_

MandrakeSoft Multi Network Firewall 2.0

• Mandriva libpython2.3-2.3.7-0.2.M20mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpython2.3-devel-2.3.7-0.2.M20mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-2.3.7-0.2.M20mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-base-2.3.7-0.2.M20mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-docs-2.3.7-0.2.M20mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva tkinter-2.3.7-0.2.M20mdk.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0

• Mandriva libpython2.3-2.3.7-0.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpython2.3-devel-2.3.7-0.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-2.3.7-0.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-base-2.3.7-0.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-docs-2.3.7-0.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva tkinter-2.3.7-0.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0 x86_64

• Mandriva lib64python2.3-2.3.7-0.2.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64python2.3-devel-2.3.7-0.2.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-2.3.7-0.2.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-base-2.3.7-0.2.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-docs-2.3.7-0.2.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva tkinter-2.3.7-0.2.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/

VMWare ESX Server 3.0.3

• VMWare ESX303-201002206-UG.zip
  http://download3.vmware.com/software/vi/ESX303-201002206-UG.zip

Python 'expandtabs' Multiple Integer Overflow Vulnerabilities

References:

• About the security content of Security Update 2009-001 (Apple)
  
• CVE Request - Python string expandtabs (Jan Lieskovsky)
  
• Fix the overflows in expandtabs(). This time for sure! (guido.van.rossum)
  
• Python Homepage (Python Software Foundation)
  
• VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release addre (VMware Security Team )
  
• ASA-2009-306 python security update (RHSA-2009-1177) (Avaya)