FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2008-3144

This CVE name corresponds to:

Entered	Topic
2008-09-10	python -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2008-3144 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2008-3144
Phase	Assigned(20080710)

Description

Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.

References

Source	Reference
BUGTRAQ	20080813 rPSA-2008-0243-1 idle python
BUGTRAQ	20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components
CONFIRM	http://bugs.gentoo.org/show_bug.cgi?id=232137
CONFIRM	http://bugs.python.org/issue2588
CONFIRM	http://bugs.python.org/issue2589
CONFIRM	http://svn.python.org/view?rev=63728&view=rev
CONFIRM	http://svn.python.org/view?rev=63734&view=rev
CONFIRM	http://svn.python.org/view?rev=63883&view=rev
CONFIRM	http://wiki.rpath.com/Advisories:rPSA-2008-0243
CONFIRM	http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900
CONFIRM	http://support.apple.com/kb/HT3438
CONFIRM	http://www.vmware.com/security/advisories/VMSA-2009-0016.html
APPLE	APPLE-SA-2009-02-12
DEBIAN	DSA-1667
GENTOO	GLSA-200807-16
MANDRIVA	MDVSA-2008:163
MANDRIVA	MDVSA-2008:164
SLACKWARE	SSA:2008-217-01
SUSE	SUSE-SR:2008:017
UBUNTU	USN-632-1
BID	30491
OVAL	oval:org.mitre.oval:def:10170
OVAL	oval:org.mitre.oval:def:7725
SECUNIA	32793
SECUNIA	37471
VUPEN	ADV-2008-2288
SECUNIA	31358
SECUNIA	31305
SECUNIA	31332
SECUNIA	31365
SECUNIA	31518
SECUNIA	31687
SECUNIA	31473
SECUNIA	33937
VUPEN	ADV-2009-3316
XF	python-multiple-bo(44173)
XF	python-pyosvsnprintf-bo(44171)