Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-1015
HistoryMay 09, 2011 - 10:55 p.m.

CVE-2011-1015

2011-05-0922:55:01
CWE-200
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.3%

JSON

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.

Affected configurations

NVD
Node
pythonpythonMatch3.0

Related

ubuntucve 1
prion 1
veracode 1
openvas 33
cve 1
cvelist 1
nessus 20
securityvulns 2
redhat 3
centos 2
oraclelinux 3
osv 1
debian 1
gentoo 1
ubuntu 3
vmware 2
ubuntucve
ubuntucve
CVE-2011-1015
2011-05-09 00:00:00
prion
prion
Code injection
2011-05-09 22:55:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:55:29
openvas
openvas
Python CGIHTTPServer Module Information Disclosure Vulnerability
2011-06-07 00:00:00
Python CGIHTTPServer Module Information Disclosure Vulnerability (May 2011) - Linux
2021-11-01 00:00:00
Python CGIHTTPServer Module Information Disclosure Vulnerability - Windows
2011-06-07 00:00:00
cve
cve
CVE-2011-1015
2011-05-09 22:55:01
cvelist
cvelist
CVE-2011-1015
2011-05-09 22:00:00
nessus
nessus
Mandriva Linux Security Advisory : python (MDVSA-2011:096)
2011-05-23 00:00:00
Scientific Linux Security Update : python on SL6.x i386/x86_64
2012-08-01 00:00:00
SuSE 10 Security Update : Python (ZYPP Patch Number 8080) (BEAST)
2012-04-27 00:00:00
securityvulns
securityvulns
python security vulnerabilities
2011-05-25 00:00:00
[ MDVSA-2011:096 ] python
2011-05-25 00:00:00
redhat
redhat
(RHSA-2011:0554) Moderate: python security, bug fix, and enhancement update
2011-05-19 00:00:00
(RHSA-2011:0492) Moderate: python security update
2011-05-05 00:00:00
(RHSA-2011:0491) Moderate: python security update
2011-05-05 00:00:00
centos
centos
python, tkinter security update
2011-05-05 20:50:48
python, tkinter security update
2011-05-05 21:37:02
oraclelinux
oraclelinux
python security update
2011-05-05 00:00:00
python security update
2011-05-05 00:00:00
python security, bug fix, and enhancement update
2011-05-28 00:00:00
osv
osv
python2.6 - security update
2014-07-31 00:00:00
debian
debian
[DLA 25-1] python2.6 security update
2014-07-31 21:07:32
gentoo
gentoo
Python: Multiple vulnerabilities
2014-01-06 00:00:00
ubuntu
ubuntu
Python 2.6 vulnerabilities
2012-10-04 00:00:00
Python 2.5 vulnerabilities
2012-10-17 00:00:00
Python 2.4 vulnerabilities
2012-10-17 00:00:00
vmware
vmware
VMware ESXi and ESX updates to third party library and ESX Service Console
2012-01-30 00:00:00
VMware ESXi and ESX updates to third party library and ESX Service Console
2012-01-30 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.3%

JSON
Related for NVD:CVE-2011-1015
ubuntucve1prion1veracode1openvas33cve1cvelist1nessus20securityvulns2redhat3centos2oraclelinux3osv1debian1gentoo1ubuntu3vmware2