Test ID:	1.3.6.1.4.1.25623.1.0.800056
Category:	Buffer overflow
Title:	Python Multiple Integer Overflow Vulnerabilities (Win)
Summary:	Check for the version of Python
Description:	Overview: This host has Python installed and is prone to integer overflow vulnerability. Vulnerability Insight: The flaw exists due the the way it handles large integer values in the tabsize arguments as input to expandtabs methods (string_expandtabs and nicode_expandtabs) in stringobject.c and unicodeobject.c. Impact: Remote exploitation will allow execution of arbitrary code via large number of integer values to modules. Impact Level: Application Affected Software/OS: Python 2.5.2 on Windows. Fix: Upgrade to Python 2.5.5 or later. For updates refer to http://www.python.org/
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5031 Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search) http://www.securityfocus.com/archive/1/archive/1/507985/100/0/threaded http://www.openwall.com/lists/oss-security/2008/11/05/2 http://www.openwall.com/lists/oss-security/2008/11/05/3 http://scary.beasts.org/security/CESA-2008-008.html http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://security.gentoo.org/glsa/glsa-200907-16.xml http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11280 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8564 http://secunia.com/advisories/33937 http://secunia.com/advisories/35750 http://secunia.com/advisories/37471 http://www.vupen.com/english/advisories/2009/3316 XForce ISS Database: python-expandtabs-integer-overflow(46612) http://xforce.iss.net/xforce/xfdb/46612
Copyright	Copyright (C) 2008 Greenbone Networks GmbH

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: