CVE-2006-1542
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-1542
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Python 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Python是Python基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。 Python 2.4.2及之前版本存在安全漏洞。但事实上看起来在一个编程语言解释器中可能意味着一些应用程序受到了影响，虽然所受到的攻击情况有限，因为攻击者已可能需要跨过特权界限，将一个受制程序置于一个长目录名称下； 或者，采用Python法判定当前工作目录，setuid应用程序可能会受到影响。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-1542
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-1542
请登录查看更多情报信息。
- http://www.gotfault.net/research/exploit/gexp-python.pyx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2006-1542
Same Patch Batch · n/a · 2006-03-30 · 37 CVEs total
| CVE-2006-1511 | Microsoft .NET Framework SDK MSIL工具堆溢出漏洞 | |
| CVE-2006-1503 | Virtual War 'Functions_install.PHP' 远程文件包含漏洞 | |
| CVE-2006-1504 | Arab IT ArabPortal系统跨站脚本攻击漏洞 | |
| CVE-2006-1505 | 基本分析和之前引擎Base_maintenance.PHP身份验证绕过漏洞 | |
| CVE-2006-1506 | Sun Microsystems Sun Grid Engine rsh中未明安全权限漏洞 | |
| CVE-2006-1507 | PHPKIT跨站脚本攻击漏洞 | |
| CVE-2006-1508 | Connect Daily多个跨站脚本攻击漏洞 | |
| CVE-2006-1509 | HP-UX Passwd不明本地拒绝服务漏洞 | |
| CVE-2006-1510 | Microsoft .NET Framework SDK MSIL工具堆溢出漏洞 | |
| CVE-2005-4748 | VWar Functions_Admin.PHP远程文件包含漏洞 | |
| CVE-2006-1495 | NetOffice Sendpassword.PHP SQL注入漏洞 | |
| CVE-2006-1496 | VihorDesign 'Index.PHP'跨站脚本攻击漏洞 | |
| CVE-2006-1497 | VihorDesign 'Index.PHP'目录遍历漏洞 | |
| CVE-2006-1498 | MediaWiki Encoded Page Link 跨站脚本攻击漏洞 | |
| CVE-2006-1499 | vCounter 'vCounter.PHP' SQL注入漏洞 | |
| CVE-2006-1500 | Tilde CMS 'Index.PHP' SQL注入漏洞 | |
| CVE-2006-1501 | OneOrZero Helpdesk 'Index.PHP' SQL注入漏洞 | |
| CVE-2006-1502 | MPlayer多个堆溢出漏洞 | |
| CVE-2006-1536 | Phoetux.net PhxContacts 多个SQL注入漏洞 | |
| CVE-2006-1546 | Apache Struts 安全漏洞 |
Showing top 20 of 37 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2006-1542
No comments yet