mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
Twenty-eight year folders sat above the README, so anyone opening the repository scrolled past 1999 through 2026 before reaching a word about what it is. The entries move to cves/ and the files the pipeline reads and writes move to index/, which leaves the root at README, LICENSE and five directories. Nothing about the data changes. Every script takes its two roots from the same place, and all five syncs report zero writes against the moved tree, which is what a correct repoint looks like.
1.1 KiB
1.1 KiB
CVE-2013-1752
Description
** REJECT ** Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 "Independently Fixable" in the CVE Counting Decisions.
POC
Reference
No PoCs from references.
Github
No PoCs found on GitHub currently.