CVE-2005-0089

Publication date 2 May 2005

Last updated 17 July 2025

Ubuntu priority

Description

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
python2.2	7.04 feisty	Not in release
	6.10 edgy	Not in release
	6.06 LTS dapper	Fixed 2.2.3dfsg-4
python2.3	7.04 feisty	Not in release
	6.10 edgy	Not in release
	6.06 LTS dapper	Fixed 2.3.5-9ubuntu1.2
python2.4	7.04 feisty	Fixed 2.4.4~c1-0ubuntu1
	6.10 edgy	Fixed 2.4.4~c1-0ubuntu1
	6.06 LTS dapper	Fixed 2.4.3-0ubuntu6
python2.5	7.04 feisty	Fixed 2.5-2ubuntu2
	6.10 edgy	Fixed 2.5-2ubuntu2
	6.06 LTS dapper	Not in release

CVE-2005-0089

Description

Status

References

Related Ubuntu Security Notices (USN)

Other references