REDHAT-BUG-690560
First published: Thu Mar 24 2011(Updated: )
A security flaw was found in the way handlers for ftp:// and file:// URL schemes in the Python urllib and urllib2 extensible libraries processed the urllib open URL request. A remote attacker could use this flaw to access sensitive information or cause a denial of service (excessive CPU and memory use) of a Python web application, processing URLs, via a specially-crafted urllib open URL request.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| urllib3 | ||
| urllib |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://bugs.python.org/issue11662
- http://www.openwall.com/lists/oss-security/2011/03/24/5
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=690570
- https://access.redhat.com/security/cve/CVE-2011-1521
- http://www.openwall.com/lists/oss-security/2011/03/28/2
- https://rhn.redhat.com/errata/RHSA-2011-0492.html
- https://rhn.redhat.com/errata/RHSA-2011-0491.html
- https://rhn.redhat.com/errata/RHSA-2011-0554.html
- https://bugzilla.redhat.com/show_bug.cgi?id=690560
Frequently Asked Questions
What is the severity of REDHAT-BUG-690560?
REDHAT-BUG-690560 is classified as a security flaw which can potentially allow remote attackers to access sensitive information or cause a denial of service.
How do I fix REDHAT-BUG-690560?
To mitigate REDHAT-BUG-690560, it is recommended to update to the latest version of Python urllib and urllib2 that addresses this issue.
What vulnerabilities are affected by REDHAT-BUG-690560?
REDHAT-BUG-690560 affects the handlers for ftp:// and file:// URL schemes in the Python urllib and urllib2 libraries.
Can REDHAT-BUG-690560 be exploited remotely?
Yes, a remote attacker can exploit REDHAT-BUG-690560 to access sensitive information or cause a denial of service.
What are the potential consequences of REDHAT-BUG-690560?
The potential consequences of REDHAT-BUG-690560 include exposure of sensitive information and increased resource consumption leading to denial of service.
- agent/type
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-1521
- agent/last-modified-date
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/python
- canonical/urllib3
- canonical/urllib