CVE-2010-1449 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 UNKNOWN	NETWORK	LOW		AV:N/AC:L/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 87%

Affected Products (NVD)

Vendor	Product	Version
python	python	2.5.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

python2.7

bullseye	2.7.18-8+deb11u1 fixed
lenny	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

python2.4

dapper	ignored
hardy	not-affected
jaunty	ignored
karmic	ignored
lucid	dne
maverick	dne
natty	dne
oneiric	dne
precise	dne

python2.5

dapper	dne
hardy	not-affected
jaunty	ignored
karmic	ignored
lucid	dne
maverick	dne
natty	dne
oneiric	dne
precise	dne

Common Weakness Enumeration

CWE-190 - Integer Overflow or Wraparound
The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.

References

http://bugs.python.org/issue8678

http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

http://secunia.com/advisories/42888

http://secunia.com/advisories/43068

http://secunia.com/advisories/43364

http://support.apple.com/kb/HT4435

http://www.mandriva.com/security/advisories?name=MDVSA-2010:215

http://www.redhat.com/support/errata/RHSA-2011-0027.html

http://www.redhat.com/support/errata/RHSA-2011-0260.html

http://www.securityfocus.com/bid/40363

http://www.vupen.com/english/advisories/2011/0122

http://www.vupen.com/english/advisories/2011/0212

http://www.vupen.com/english/advisories/2011/0413

https://bugzilla.redhat.com/show_bug.cgi?id=541698

http://bugs.python.org/issue8678

http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

http://secunia.com/advisories/42888

http://secunia.com/advisories/43068

http://secunia.com/advisories/43364

http://support.apple.com/kb/HT4435

http://www.mandriva.com/security/advisories?name=MDVSA-2010:215

http://www.redhat.com/support/errata/RHSA-2011-0027.html

http://www.redhat.com/support/errata/RHSA-2011-0260.html

http://www.securityfocus.com/bid/40363

http://www.vupen.com/english/advisories/2011/0122

http://www.vupen.com/english/advisories/2011/0212

http://www.vupen.com/english/advisories/2011/0413

https://bugzilla.redhat.com/show_bug.cgi?id=541698