Test ID:	1.3.6.1.4.1.25623.1.0.126133
Category:	General
Title:	Python < 3.6.14, 3.7.x < 3.7.11, 3.8.x < 3.8.9, 3.9.x < 3.9.3 (bpo-43285) - Windows
Summary:	Python is prone to a remote code execution (RCE); vulnerability.
Description:	Summary: Python is prone to a remote code execution (RCE) vulnerability. Vulnerability Impact: This flaw allows an attacker to set up a malicious FTP server, that can trick FTP clients into connecting back to a given IP address and port. Affected Software/OS: Python prior to version 3.6.14, versions 3.7.x prior to 3.7.11, 3.8.x prior to 3.8.9 and 3.9.x prior to 3.9.3. Solution: Update to version 3.6.14, 3.7.11, 3.8.9, 3.9.3 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-4189 https://access.redhat.com/security/cve/CVE-2021-4189 https://bugs.python.org/issue43285 https://bugzilla.redhat.com/show_bug.cgi?id=2036020 https://github.com/python/cpython/commit/0ab152c6b5d95caa2dc1a30fa96e10258b5f188e https://python-security.readthedocs.io/vuln/ftplib-pasv.html https://security-tracker.debian.org/tracker/CVE-2021-4189 https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.