Lucene search
Gentoo FoundationGLSA-201310-09HistoryOct 10, 2013 - 12:00 a.m.
Setuptools: Man-in-the-Middle attack
2013-10-1000:00:00
Gentoo Foundation
security.gentoo.org
15
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
51.7%
Background
Setuptools is a manager for Python packages.
Description
Setuptools does not check the integrity of downloaded Python packages.
Impact
A remote attacker could perform man-in-the-middle attacks to execute arbitrary code with the privileges of the process.
Workaround
There is no known workaround at this time.
Resolution
All Setuptools users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-python/setuptools-0.8-r1"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | dev-python/setuptools | < 0.8-r1 | UNKNOWN |
Related
mageia
mageia
github
github
Setuptools vulnerable to Man-in-the-middle attacks
2022-05-17 05:01:02
cvelist
cvelist
CVE-2013-1633
2022-10-03 16:14:47
prion
prion
Design/Logic Flaw
2013-08-06 02:52:00
osv
osv
Setuptools vulnerable to Man-in-the-middle attacks
2022-05-17 05:01:02
PYSEC-2013-22
2013-08-06 02:52:00
openvas
openvas
Gentoo Security Advisory GLSA 201310-09
2015-09-29 00:00:00
Mageia: Security Advisory (MGASA-2013-0274)
2022-01-28 00:00:00
Fedora Update for python-virtualenv FEDORA-2013-14891
2013-09-06 00:00:00
nessus
nessus
SuSE 11.3 Security Update : python-setuptools (SAT Patch Number 9116)
2014-04-15 00:00:00
Mandriva Linux Security Advisory : python-setuptools (MDVSA-2013:227)
2013-09-10 00:00:00
GLSA-201310-09 : Setuptools: Man-in-the-Middle attack
2013-10-11 00:00:00
nvd
nvd
CVE-2013-1633
2013-08-06 02:52:10
cve
cve
CVE-2013-1633
2022-10-03 16:14:47
ubuntucve
ubuntucve
CVE-2013-1633
2013-08-06 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: python-virtualenv-1.10.1-1.fc18
2013-09-05 01:25:58
[SECURITY] Fedora 19 Update: python-virtualenv-1.10.1-1.fc19
2013-09-05 01:26:45
securityvulns
securityvulns
[ MDVSA-2013:227 ] python-setuptools
2013-09-11 00:00:00
python libraries security vulnerabilities
2013-09-11 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
51.7%
Related for GLSA-201310-09