FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2008-2315

This CVE name corresponds to:

Entered	Topic
2008-09-10	python -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2008-2315 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2008-2315
Phase	Assigned(20080518)

Description

Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.

References

Source	Reference
BUGTRAQ	20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components
MLIST	[oss-security] 20081105 CVE Request - Python string expandtabs
MLIST	[oss-security] 20081105 Re: CVE Request - Python string expandtabs
CONFIRM	http://bugs.gentoo.org/attachment.cgi?id=159418&action=view
CONFIRM	http://bugs.gentoo.org/show_bug.cgi?id=230640
CONFIRM	http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900
CONFIRM	http://support.apple.com/kb/HT3438
CONFIRM	http://www.vmware.com/security/advisories/VMSA-2009-0016.html
CONFIRM	http://support.avaya.com/css/P8/documents/100074697
APPLE	APPLE-SA-2009-02-12
DEBIAN	DSA-1667
GENTOO	GLSA-200807-16
MANDRIVA	MDVSA-2008:163
MANDRIVA	MDVSA-2008:164
SLACKWARE	SSA:2008-217-01
SUSE	SUSE-SR:2008:017
UBUNTU	USN-632-1
BID	30491
OVAL	oval:org.mitre.oval:def:8445
OVAL	oval:org.mitre.oval:def:8683
OVAL	oval:org.mitre.oval:def:9761
SECUNIA	32793
SECUNIA	37471
SECUNIA	38675
VUPEN	ADV-2008-2288
SECUNIA	31358
SECUNIA	31305
SECUNIA	31332
SECUNIA	31365
SECUNIA	31518
SECUNIA	31687
SECUNIA	33937
VUPEN	ADV-2009-3316
XF	python-multiple-bo(44173)
XF	python-modules-bo(44172)