Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-2315
HistoryAug 01, 2008 - 12:00 a.m.

CVE-2008-2315

2008-08-0100:00:00
ubuntu.com
ubuntu.com
20

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.012 Low

EPSS

Percentile

85.0%

Multiple integer overflows in Python 2.5.2 and earlier allow
context-dependent attackers to have an unknown impact via vectors related
to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4)
longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8)
mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject
and unicodeobject in 2.5.2 are covered by CVE-2008-5031.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchpython2.4< 2.4.3-0ubuntu6.2UNKNOWN
ubuntu7.04noarchpython2.4< 2.4.4-2ubuntu7.2UNKNOWN
ubuntu7.10noarchpython2.4< 2.4.4-6ubuntu4.2UNKNOWN
ubuntu8.04noarchpython2.4< 2.4.5-1ubuntu4.1UNKNOWN
ubuntu7.04noarchpython2.5< 2.5.1-0ubuntu1.2UNKNOWN
ubuntu7.10noarchpython2.5< 2.5.1-5ubuntu5.2UNKNOWN
ubuntu8.04noarchpython2.5< 2.5.2-2ubuntu4.1UNKNOWN

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.012 Low

EPSS

Percentile

85.0%