CVE-2006-1542: python
Vulnerability summary
CVE-2006-1542 is a low (CVSS 3.7) vulnerability in python. EPSS estimates a 0.91% chance of exploitation in the next 30 days, higher than 59.9% of scored vulnerabilities. 2 public exploits are recorded.
Weaponized exploit (exploit-database, 18-03-2006)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 3Timeline
- 30-03-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.91%
Chance of exploitation in the next 30 days
Percentile
60%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.91% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundExploit Reference (gotfault.net)
Maturity: unknown
Python 2.4.2 - 'realpath()' Local Stack Overflow
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Python1 product
- python≤ 2.4.2
1 vendor · 1 product
References
4 links- www.redhat.com/support/errata/RHSA-2008-0629.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory