CVE-2010-3492
First published: Tue Oct 19 2010(Updated: )
The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote attackers to conduct denial of service attacks that terminate these applications via network connections.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Python Babel Localedata | <=2.7 | |
| Python Babel Localedata | >=3.0<3.1.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2010/09/24/3
- http://www.openwall.com/lists/oss-security/2010/09/11/2
- http://www.openwall.com/lists/oss-security/2010/09/09/6
- http://www.openwall.com/lists/oss-security/2010/09/22/3
- http://bugs.python.org/issue6706
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:216
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:215
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12111
Frequently Asked Questions
What is the severity of CVE-2010-3492?
CVE-2010-3492 is considered a moderate severity vulnerability due to its potential impact on daemon applications.
How do I fix CVE-2010-3492?
To fix CVE-2010-3492, upgrade to Python version 3.2 or later, where the issue has been resolved.
What are the affected versions for CVE-2010-3492?
CVE-2010-3492 affects Python versions before 3.2, specifically up to 2.7 and from 3.0 to 3.1.2.
What types of applications are vulnerable to CVE-2010-3492?
Daemon applications that rely on the asyncore module for handling network connections are vulnerable to CVE-2010-3492.
Can CVE-2010-3492 be exploited remotely?
Yes, CVE-2010-3492 can be exploited by remote attackers to conduct potentially harmful actions on affected applications.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/weakness
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/python
- canonical/python babel localedata
- version/python babel localedata/2.7
- version/python babel localedata/3.0