CVE-2011-4940
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.2%
The list_directory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer 7 via UTF-7 encoding.
Produtos afetados
n/a · n/aReferências
http://bugs.python.org/issue11442http://jvndb.jvn.jp/jvndb/JVNDB-2012-000063http://jvn.jp/en/jp/JVN51176027/index.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=803500http://secunia.com/advisories/50858http://secunia.com/advisories/51024http://secunia.com/advisories/51040http://www.securityfocus.com/bid/54083http://www.ubuntu.com/usn/USN-1592-1http://www.ubuntu.com/usn/USN-1596-1http://www.ubuntu.com/usn/USN-1613-1http://www.ubuntu.com/usn/USN-1613-2