Python Libcloud Man In The Middle Vulnerability
BID:45229
Info
Python Libcloud Man In The Middle Vulnerability
| Bugtraq ID: | 45229 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 07 2010 12:00AM |
| Updated: | Dec 07 2010 12:00AM |
| Credit: | david b |
| Vulnerable: |
Python Software Foundation Python 3.1.1 Python Software Foundation Python 3.0.1 Python Software Foundation Python 2.6.2 Python Software Foundation Python 2.5.3 Python Software Foundation Python 2.5.2 -r6 Python Software Foundation Python 2.5.2 Python Software Foundation Python 2.5.1 Python Software Foundation Python 2.4.5 Python Software Foundation Python 2.4.4 -r14 Python Software Foundation Python 2.4.4 Python Software Foundation Python 2.4.3 Python Software Foundation Python 2.4.2 Python Software Foundation Python 2.4.1 Python Software Foundation Python 2.4 Python Software Foundation Python 2.3.6 Python Software Foundation Python 2.3.5 Python Software Foundation Python 2.3.4 Python Software Foundation Python 2.3.3 Python Software Foundation Python 2.3.2 Python Software Foundation Python 2.3.1 Python Software Foundation Python 2.3 b1 Python Software Foundation Python 2.3 Python Software Foundation Python 2.2.3 Python Software Foundation Python 2.2.2 Python Software Foundation Python 2.2.1 Python Software Foundation Python 2.2 Python Software Foundation Python 2.1.3 Python Software Foundation Python 2.1.2 Python Software Foundation Python 2.1.1 Python Software Foundation Python 2.1 Python Software Foundation Python 2.0.1 Python Software Foundation Python 2.0 Python Software Foundation Python 3.2 Python Software Foundation Python 3.1.2 Python Software Foundation Python 3.1 Python Software Foundation Python 2.7 Python Software Foundation Python 2.6 Python Software Foundation Python 2.5.5c2 Python Software Foundation Python 2.5 |
| Not Vulnerable: | |
Discussion
Python Libcloud Man In The Middle Vulnerability
Python is prone to a man-in-the-middle vulnerability.
Attackers can exploit this issue to sniff instant-messaging sessions and obtain potentially sensitive information.
Python is prone to a man-in-the-middle vulnerability.
Attackers can exploit this issue to sniff instant-messaging sessions and obtain potentially sensitive information.
Exploit / POC
Python Libcloud Man In The Middle Vulnerability
An attacker may use readily available tools to exploit this issue.
An attacker may use readily available tools to exploit this issue.
Solution / Fix
Python Libcloud Man In The Middle Vulnerability
Solution:
Currently we are not aware of any vendor supplied patches If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor supplied patches If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Python Libcloud Man In The Middle Vulnerability
References:
References:
- Python Homepage (Python Software Foundation)
- python project is vulnerable to MITM as it fails to verify the ssl validity of t (d1b)
- python-libcloud: libcloud https connections are not secured against mitm attacks (Soren Hansen)