CVE-2005-0089

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register…

published February 6, 2005

CVSS
—
EPSS
6%
Percentile
93.3
In the wild
Unconfirmed
What it is

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06001 · 93.3th percentile
Published
2005-02-06T05:00Z
EPSS history
Timeline
  • 06 FEB 05:00Z
    The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register…
    cvelistv5