CVE-2011-1015
EUVD-2011-103209.05.2011, 22:55
The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| python | python | 3.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| python2.4 |
| ||||||||||||||
| python2.5 |
| ||||||||||||||
| python2.6 |
| ||||||||||||||
| python2.7 |
|
Common Weakness Enumeration
References