CVE-2010-1449 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 UNKNOWN	NETWORK	LOW		AV:N/AC:L/Au:N/C:P/I:P/A:P
redhat	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 87%

Vendor	Product	Version
python	python	2.5.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

python2.7

bullseye	2.7.18-8+deb11u1 fixed
lenny	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

python2.4

precise	dne
oneiric	dne
natty	dne
maverick	dne
lucid	dne
karmic	ignored
jaunty	ignored
hardy	not-affected
dapper	ignored

python2.5

precise	dne
oneiric	dne
natty	dne
maverick	dne
lucid	dne
karmic	ignored
jaunty	ignored
hardy	not-affected
dapper	dne

Common Weakness Enumeration

CWE-190 - Integer Overflow or Wraparound
The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.

References

http://bugs.python.org/issue8678

http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

http://secunia.com/advisories/42888

http://secunia.com/advisories/43068

http://secunia.com/advisories/43364

http://support.apple.com/kb/HT4435

http://www.mandriva.com/security/advisories?name=MDVSA-2010:215

http://www.redhat.com/support/errata/RHSA-2011-0027.html

http://www.redhat.com/support/errata/RHSA-2011-0260.html

http://www.securityfocus.com/bid/40363

http://www.vupen.com/english/advisories/2011/0122

http://www.vupen.com/english/advisories/2011/0212

http://www.vupen.com/english/advisories/2011/0413

https://bugzilla.redhat.com/show_bug.cgi?id=541698

http://bugs.python.org/issue8678

http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

http://secunia.com/advisories/42888

http://secunia.com/advisories/43068

http://secunia.com/advisories/43364

http://support.apple.com/kb/HT4435

http://www.mandriva.com/security/advisories?name=MDVSA-2010:215

http://www.redhat.com/support/errata/RHSA-2011-0027.html

http://www.redhat.com/support/errata/RHSA-2011-0260.html

http://www.securityfocus.com/bid/40363

http://www.vupen.com/english/advisories/2011/0122

http://www.vupen.com/english/advisories/2011/0212

http://www.vupen.com/english/advisories/2011/0413

https://bugzilla.redhat.com/show_bug.cgi?id=541698