CVE-2011-1521

Advisory lineage Upstream: 0 Downstream: 8
Modified
Published: 24 May 2011, 23:00
Last modified:06 Aug 2024, 22:28

Vulnerability Summary

Overall Risk (default)
medium
26/100
CVSS Score
6.4 MEDIUM
v2.0 (nvd)
EPSS Score
1.41% LOW
1% probability +0.41%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 May 2011, 23:00
Published
Vulnerability first disclosed
06 Aug 2024, 22:28
Last Modified
Vulnerability information updated

Description

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.

CVSS Metrics

  • v2.0•MEDIUM•Score: 6.4AV:N/AC:L/Au:N/C:P/I:N/A:P

EPSS Trends

Current EPSS score: 1.41%• Percentile: 81%

Techniques & Countermeasures

  • CWE-399•Resource Management Errors

    Weaknesses in this category are related to improper management of system resources.

Affected Systems

  • python•python

    2.0 | 2.0.1 | 2.1 | 2.1.1 | 2.1.2 | 2.1.3 | 2.2 | 2.2.1 | 2.2.2 | 2.2.3 | 2.3.1 | 2.3.2 | 2.3.3 | 2.3.4 | 2.3.5 | 2.3.7 | 2.4.1 | 2.4.2 | 2.4.3 | 2.4.4 | 2.4.6 | 2.5.1 | 2.5.2 | 2.5.3 | 2.5.4 | 2.6.1 | 2.6.4 | 2.6.5 | 2.6.6 | 2.6.7 | 2.7.1 | 3.0 | 3.0.1 | 3.1 | 3.1.1 | 3.1.2 | 3.1.3 | 3.2 | 3.2:alpha

References (26)