python-feedparser Denial of Service and Security Bypass Vulnerabilities
BID:46867
Info
python-feedparser Denial of Service and Security Bypass Vulnerabilities
| Bugtraq ID: | 46867 |
| Class: | Unknown |
| CVE: |
CVE-2011-1156 CVE-2011-1157 CVE-2011-1158 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 14 2011 12:00AM |
| Updated: | Apr 13 2015 09:00PM |
| Credit: | Reported by the vendor |
| Vulnerable: |
SuSE openSUSE 11.4 SuSE openSUSE 11.3 S.u.S.E. openSUSE 11.2 python-feedparser python-feedparser 5.0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 |
| Not Vulnerable: |
python-feedparser python-feedparser 5.0.1 |
Discussion
python-feedparser Denial of Service and Security Bypass Vulnerabilities
python-feedparser is prone to a denial-of-service vulnerability and multiple security-bypass vulnerabilities.
Exploiting these issues can allow attackers to bypass certain security restrictions or to cause denial-of-service conditions.
Versions prior to python-feedparser 5.0.1 are vulnerable.
python-feedparser is prone to a denial-of-service vulnerability and multiple security-bypass vulnerabilities.
Exploiting these issues can allow attackers to bypass certain security restrictions or to cause denial-of-service conditions.
Versions prior to python-feedparser 5.0.1 are vulnerable.
Exploit / POC
python-feedparser Denial of Service and Security Bypass Vulnerabilities
Attackers can use readily available tools to exploit these issues.
Attackers can use readily available tools to exploit these issues.
Solution / Fix
python-feedparser Denial of Service and Security Bypass Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1
Mandriva Linux Mandrake 2010.1 x86_64
Mandriva Linux Mandrake 2010.0 x86_64
Mandriva Linux Mandrake 2010.0
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.1
-
Mandriva python-feedparser-4.1-8.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2010.1 x86_64
-
Mandriva python-feedparser-4.1-8.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2010.0 x86_64
-
Mandriva python-feedparser-4.1-7.1mdv2010.0.noarch.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2010.0
-
Mandriva python-feedparser-4.1-7.1mdv2010.0.noarch.rpm
http://www.mandriva.com/en/download/
References
python-feedparser Denial of Service and Security Bypass Vulnerabilities
References:
References: