• info
• discussion
• exploit
• solution
• references

Python Multiple Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 alpha

• Debian idle-python2.4_2.4.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/idle-python2. 4_2.4.6-1+lenny1_all.deb


• Debian idle-python2.5_2.5.2-15+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/idle-python2. 5_2.5.2-15+lenny1_all.deb


• Debian python2.4-dbg_2.4.6-1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dbg _2.4.6-1+lenny1_alpha.deb


• Debian python2.4-dev_2.4.6-1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dev _2.4.6-1+lenny1_alpha.deb


• Debian python2.4-examples_2.4.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-exa mples_2.4.6-1+lenny1_all.deb


• Debian python2.4-minimal_2.4.6-1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-min imal_2.4.6-1+lenny1_alpha.deb


• Debian python2.4_2.4.6-1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4_2.4 .6-1+lenny1_alpha.deb


• Debian python2.5-dbg_2.5.2-15+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-dbg _2.5.2-15+lenny1_alpha.deb


• Debian python2.5-dev_2.5.2-15+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-dev _2.5.2-15+lenny1_alpha.deb


• Debian python2.5-examples_2.5.2-15+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-exa mples_2.5.2-15+lenny1_all.deb


• Debian python2.5-minimal_2.5.2-15+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-min imal_2.5.2-15+lenny1_alpha.deb


• Debian python2.5_2.5.2-15+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5_2.5 .2-15+lenny1_alpha.deb

Debian Linux 5.0 armel

• Debian idle-python2.4_2.4.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/idle-python2. 4_2.4.6-1+lenny1_all.deb


• Debian idle-python2.5_2.5.2-15+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/idle-python2. 5_2.5.2-15+lenny1_all.deb


• Debian python2.4-dbg_2.4.6-1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dbg _2.4.6-1+lenny1_armel.deb


• Debian python2.4-dev_2.4.6-1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dev _2.4.6-1+lenny1_armel.deb


• Debian python2.4-examples_2.4.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-exa mples_2.4.6-1+lenny1_all.deb


• Debian python2.4-minimal_2.4.6-1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-min imal_2.4.6-1+lenny1_armel.deb


• Debian python2.4_2.4.6-1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4_2.4 .6-1+lenny1_armel.deb


• Debian python2.5-dbg_2.5.2-15+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-dbg _2.5.2-15+lenny1_armel.deb


• Debian python2.5-dev_2.5.2-15+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-dev _2.5.2-15+lenny1_armel.deb


• Debian python2.5-examples_2.5.2-15+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-exa mples_2.5.2-15+lenny1_all.deb


• Debian python2.5-minimal_2.5.2-15+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-min imal_2.5.2-15+lenny1_armel.deb


• Debian python2.5_2.5.2-15+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5_2.5 .2-15+lenny1_armel.deb

Debian Linux 4.0 mips

• Debian idle-python2.4_2.4.4-3+etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/idle-python2. 4_2.4.4-3+etch2_all.deb


• Debian idle-python2.4_2.4.4-3+etch3_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/idle-python2. 4_2.4.4-3+etch3_all.deb


• Debian idle-python2.5_2.5-5+etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/idle-python2. 5_2.5-5+etch2_all.deb


• Debian python2.4-dbg_2.4.4-3+etch2_mips.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dbg _2.4.4-3+etch2_mips.deb


• Debian python2.4-dbg_2.4.4-3+etch3_mips.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dbg _2.4.4-3+etch3_mips.deb


• Debian python2.4-dev_2.4.4-3+etch2_mips.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dev _2.4.4-3+etch2_mips.deb


• Debian python2.4-dev_2.4.4-3+etch3_mips.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dev _2.4.4-3+etch3_mips.deb


• Debian python2.4-examples_2.4.4-3+etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-exa mples_2.4.4-3+etch2_all.deb


• Debian python2.4-examples_2.4.4-3+etch3_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-exa mples_2.4.4-3+etch3_all.deb


• Debian python2.4-minimal_2.4.4-3+etch2_mips.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-min imal_2.4.4-3+etch2_mips.deb


• Debian python2.4-minimal_2.4.4-3+etch3_mips.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-min imal_2.4.4-3+etch3_mips.deb


• Debian python2.4_2.4.4-3+etch2_mips.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4_2.4 .4-3+etch2_mips.deb


• Debian python2.4_2.4.4-3+etch3_mips.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4_2.4 .4-3+etch3_mips.deb


• Debian python2.5-dbg_2.5-5+etch2_mips.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-dbg _2.5-5+etch2_mips.deb


• Debian python2.5-dev_2.5-5+etch2_mips.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-dev _2.5-5+etch2_mips.deb


• Debian python2.5-examples_2.5-5+etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-exa mples_2.5-5+etch2_all.deb


• Debian python2.5-minimal_2.5-5+etch2_mips.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-min imal_2.5-5+etch2_mips.deb


• Debian python2.5_2.5-5+etch2_mips.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5_2.5 -5+etch2_mips.deb

Debian Linux 4.0 arm

• Debian idle-python2.4_2.4.4-3+etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/idle-python2. 4_2.4.4-3+etch2_all.deb


• Debian idle-python2.4_2.4.4-3+etch3_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/idle-python2. 4_2.4.4-3+etch3_all.deb


• Debian idle-python2.5_2.5-5+etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/idle-python2. 5_2.5-5+etch2_all.deb


• Debian python2.4-dbg_2.4.4-3+etch2_arm.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dbg _2.4.4-3+etch2_arm.deb


• Debian python2.4-dbg_2.4.4-3+etch3_arm.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dbg _2.4.4-3+etch3_arm.deb


• Debian python2.4-dev_2.4.4-3+etch2_arm.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dev _2.4.4-3+etch2_arm.deb


• Debian python2.4-dev_2.4.4-3+etch3_arm.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dev _2.4.4-3+etch3_arm.deb


• Debian python2.4-examples_2.4.4-3+etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-exa mples_2.4.4-3+etch2_all.deb


• Debian python2.4-examples_2.4.4-3+etch3_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-exa mples_2.4.4-3+etch3_all.deb


• Debian python2.4-minimal_2.4.4-3+etch2_arm.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-min imal_2.4.4-3+etch2_arm.deb


• Debian python2.4-minimal_2.4.4-3+etch3_arm.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-min imal_2.4.4-3+etch3_arm.deb


• Debian python2.4_2.4.4-3+etch2_arm.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4_2.4 .4-3+etch2_arm.deb


• Debian python2.4_2.4.4-3+etch3_arm.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4_2.4 .4-3+etch3_arm.deb


• Debian python2.5-dbg_2.5-5+etch2_arm.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-dbg _2.5-5+etch2_arm.deb


• Debian python2.5-dev_2.5-5+etch2_arm.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-dev _2.5-5+etch2_arm.deb


• Debian python2.5-examples_2.5-5+etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-exa mples_2.5-5+etch2_all.deb


• Debian python2.5-minimal_2.5-5+etch2_arm.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-min imal_2.5-5+etch2_arm.deb


• Debian python2.5_2.5-5+etch2_arm.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5_2.5 -5+etch2_arm.deb

Debian Linux 4.0 m68k

• Debian idle-python2.4_2.4.4-3+etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/idle-python2. 4_2.4.4-3+etch2_all.deb


• Debian idle-python2.4_2.4.4-3+etch3_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/idle-python2. 4_2.4.4-3+etch3_all.deb


• Debian idle-python2.5_2.5-5+etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/idle-python2. 5_2.5-5+etch2_all.deb


• Debian python2.4-examples_2.4.4-3+etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-exa mples_2.4.4-3+etch2_all.deb


• Debian python2.4-examples_2.4.4-3+etch3_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-exa mples_2.4.4-3+etch3_all.deb


• Debian python2.5-examples_2.5-5+etch2_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-exa mples_2.5-5+etch2_all.deb

Debian Linux 5.0 hppa

• Debian idle-python2.4_2.4.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/idle-python2. 4_2.4.6-1+lenny1_all.deb


• Debian idle-python2.5_2.5.2-15+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/idle-python2. 5_2.5.2-15+lenny1_all.deb


• Debian python2.4-dbg_2.4.6-1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dbg _2.4.6-1+lenny1_hppa.deb


• Debian python2.4-dev_2.4.6-1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-dev _2.4.6-1+lenny1_hppa.deb


• Debian python2.4-examples_2.4.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-exa mples_2.4.6-1+lenny1_all.deb


• Debian python2.4-minimal_2.4.6-1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-min imal_2.4.6-1+lenny1_hppa.deb


• Debian python2.4_2.4.6-1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4_2.4 .6-1+lenny1_hppa.deb


• Debian python2.5-dbg_2.5.2-15+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-dbg _2.5.2-15+lenny1_hppa.deb


• Debian python2.5-dev_2.5.2-15+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-dev _2.5.2-15+lenny1_hppa.deb


• Debian python2.5-examples_2.5.2-15+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-exa mples_2.5.2-15+lenny1_all.deb


• Debian python2.5-minimal_2.5.2-15+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-min imal_2.5.2-15+lenny1_hppa.deb


• Debian python2.5_2.5.2-15+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5_2.5 .2-15+lenny1_hppa.deb

Debian Linux 5.0 m68k

• Debian idle-python2.4_2.4.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/idle-python2. 4_2.4.6-1+lenny1_all.deb


• Debian idle-python2.5_2.5.2-15+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/idle-python2. 5_2.5.2-15+lenny1_all.deb


• Debian python2.4-examples_2.4.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.4/python2.4-exa mples_2.4.6-1+lenny1_all.deb


• Debian python2.5-examples_2.5.2-15+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/python2.5/python2.5-exa mples_2.5.2-15+lenny1_all.deb

Apple Mac OS X 10.4.11

• Apple SecUpd2009-001Intel.dmg
  for Intel
  http://support.apple.com/downloads/Security_Update_2009_001__Tiger_Int el_


• Apple SecUpd2009-001PPC.dmg
  for PPC
  http://support.apple.com/downloads/Security_Update_2009_001__Tiger_PPC _

Apple Mac OS X 10.5.6

• Apple SecUpd2009-001.dmg
  http://support.apple.com/downloads/Security_Update_2009_001__Leopard_

MandrakeSoft Corporate Server 3.0

• Mandriva libpython2.3-2.3.7-0.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpython2.3-2.3.7-0.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpython2.3-devel-2.3.7-0.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpython2.3-devel-2.3.7-0.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-2.3.7-0.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-2.3.7-0.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-base-2.3.7-0.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-base-2.3.7-0.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-docs-2.3.7-0.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva python-docs-2.3.7-0.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva tkinter-2.3.7-0.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva tkinter-2.3.7-0.2.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

VMWare ESX Server 3.0.3

• VMWare ESX303-201002206-UG.zip
  http://download3.vmware.com/software/vi/ESX303-201002206-UG.zip