Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-0367

EPSS 7.80% · P92
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-0367

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Wesnoth Battle for Wesnoth PythonAI模块绕过安全限制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Battle for Wesnoth(韦诺之战)是一款开源的战棋游戏。 Battle for Wesnoth的PythonAI中的某些白名单python模块错误的导入了本应受限制的python模块，如果用户受骗下载并使用了恶意的添加程序的话，就可能绕过沙盒限制执行任意Python代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-0367

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-0367

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-03-05 · 32 CVEs total

CVE-2009-0771Mozilla Firefox 资源管理错误漏洞
CVE-2009-0821Mozilla Firefox Nested 'window.print()' 拒绝服务漏洞
CVE-2009-0820Php.Brickhost phpScheduleIt 'check.php'远程代码执行漏洞
CVE-2009-0819Oracle MySQL 安全漏洞
CVE-2009-0818Drupal Taxonomy Theme模块name参数HTML注入漏洞
CVE-2009-0817Drupal Protected Node模块脚本注入漏洞
CVE-2009-0816TYPO3后台用户界面跨站脚本攻击漏洞
CVE-2009-0815TYPO3 class.tslib_fe.php jumpUrl机制信息泄露漏洞
CVE-2009-0814Blogsa 'Widgets.aspx' 跨站脚本攻击漏洞
CVE-2009-0813Imera ImeraIEPlugin ActiveX控件任意文件下载漏洞
CVE-2009-0777Mozilla Firefox/Thunderbird/SeaMonkey地址欺骗漏洞
CVE-2009-0776Mozilla Firefox/Thunderbird/SeaMonkey 'nsIRDFService'安全绕过和信息泄露漏洞
CVE-2009-0775Mozilla Firefox安全漏洞
CVE-2009-0774Mozilla多个产品'布局引擎' 拒绝服务攻击和代码执行漏洞
CVE-2009-0773Mozilla多个产品 'JavaScript引擎' 拒绝服务和任意代码执行漏洞
CVE-2009-0772Mozilla多个产品布局引擎拒绝服务和任意代码执行漏洞
CVE-2008-6399DotNetNuke 权限许可和访问控制漏洞
CVE-2009-0619Cisco SBC拒绝服务漏洞
CVE-2009-0578Ubuntu GNOME NetworkManager 'dbus' 错误权限限制漏洞
CVE-2009-0365Ubuntu GNOME NetworkManager 'nm-applet.conf' 错误权限限制漏洞

Showing top 20 of 32 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-0367

No comments yet

Leave a comment