CVE-2005-0089: High severity Python Software Foundation Python vulnerability
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the registerinstance method to register an object without a dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0089?
CVE-2005-0089 has a moderate severity rating due to its potential for unauthorized access and modification of globals.
How do I fix CVE-2005-0089?
To fix CVE-2005-0089, update your Python version to 2.3.5 or later to eliminate the vulnerability.
What types of attacks are possible with CVE-2005-0089?
With CVE-2005-0089, remote attackers may exploit the vulnerability to read or modify global variables and potentially execute arbitrary code.
Which Python versions are affected by CVE-2005-0089?
CVE-2005-0089 affects Python versions 2.2, 2.3 up to 2.3.4, and 2.4.
Is there a patch available for CVE-2005-0089?
Yes, a patch for CVE-2005-0089 is included in updates for affected versions of Python.