Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2013-1665
Description:The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.
Test IDs: 1.3.6.1.4.1.25623.1.0.702634  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-1665
Debian Security Information: DSA-2634 (Google Search)
http://www.debian.org/security/2013/dsa-2634
http://lists.openstack.org/pipermail/openstack-announce/2013-February/000078.html
http://www.openwall.com/lists/oss-security/2013/02/19/4
http://www.openwall.com/lists/oss-security/2013/02/19/2
RedHat Security Advisories: RHSA-2013:0657
http://rhn.redhat.com/errata/RHSA-2013-0657.html
RedHat Security Advisories: RHSA-2013:0658
http://rhn.redhat.com/errata/RHSA-2013-0658.html
RedHat Security Advisories: RHSA-2013:0670
http://rhn.redhat.com/errata/RHSA-2013-0670.html
http://ubuntu.com/usn/usn-1757-1




© 1998-2025 E-Soft Inc. All rights reserved.