Python SimpleXMLRPCServer模块安全漏洞

<a href="https://www.securityfocus.com/bid/12437" target="_blank">https://www.securityfocus.com/bid/12437</a><br/> <a href="http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200505-304" target="_blank">http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200505-304</a><br/>

Python是一种开放源代码的强大功能的脚本编程语言。Python的SimpleXMLRPCServer模块存在缺陷，远程攻击者可以利用这个漏洞访问和更改函数内部。

来源:www.python.org
链接:http://www.python.org/security/PSF-2005-001/
来源:DEBIAN
名称:DSA-666
链接:http://www.debian.org/security/2005/dsa-666
来源:python.org
链接:http://python.org/security/PSF-2005-001/patch-2.2.txt
来源:BUGTRAQ
名称:20050203PythonSecurityAdvisoryPSF-2005-001-SimpleXMLRPCServer.py
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=110746469728728&w=2
来源:XF
名称:python-simplexmlrpcserver-bypass(19217)
链接:http://xforce.iss.net/xforce/xfdb/19217
来源:TRUSTIX
名称:2005-0003
链接:http://www.trustix.org/errata/2005/0003/
来源:REDHAT
名称:RHSA-2005:108
链接:http://www.redhat.com/support/errata/RHSA-2005-108.html
来源:BID
名称:12437
链接:http://www.securityfocus.com/bid/12437
来源:MANDRAKE
名称:MDKSA-2005:035
链接:http://www.mandriva.com/security/advisories?name=MDKSA-2005:035
来源:SECTRACK
名称:1013083
链接:http://securitytracker.com/id?1013083
来源:SECUNIA
名称:14128
链接:http://secunia.com/advisories/14128