CVE-2014-4650

CRITICAL severity · CVSS 9.8 · Path traversal

9.8CVSS CRITICAL

Summary

The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

Confidentiality impactHigh

Integrity impactHigh

Availability impactHigh

Exploit probability (EPSS)7%

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products we track (2)

Python Red Hat Enterprise Linux

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: http://bugs.python.org/issue21766 ↗

Additional information

NVD record
http://bugs.python.org/issue21766Patch
http://bugs.python.org/issue21766Patch
http://openwall.com/lists/oss-security/2014/06/26/3Advisory
https://access.redhat.com/security/cve/cve-2014-4650Advisory
http://openwall.com/lists/oss-security/2014/06/26/3Advisory
https://access.redhat.com/security/cve/cve-2014-4650Advisory