REDHAT-BUG-2075390: Command Injection
A command injection vulnerability was found in Python 2.x and 3.x, specifically within the mailcap module. Mailcap core-module is based on the format documented in RFC 1524. The “findmatch()” function does not sanitise the second argument (filename). As a result, the legitimate command (that is used for opening the specified mime type) is concatenated with an arbitrary command, injected by an attacker.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2075390?
The severity of REDHAT-BUG-2075390 is classified as high due to the potential for command injection.
How do I fix REDHAT-BUG-2075390?
To fix REDHAT-BUG-2075390, you should update to the latest version of Python that addresses this vulnerability.
What versions of Python are affected by REDHAT-BUG-2075390?
REDHAT-BUG-2075390 affects Python versions from 2.0 to 3.x.
What component of Python is vulnerable in REDHAT-BUG-2075390?
The vulnerable component in REDHAT-BUG-2075390 is the mailcap module, specifically the findmatch() function.
Can REDHAT-BUG-2075390 lead to remote code execution?
Yes, if exploited, REDHAT-BUG-2075390 can potentially lead to remote code execution through command injection.