{
  "id": "CVE-2005-0089",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2005-05-02T04:00:00.000",
  "lastModified": "2017-10-11T01:29:50.543",
  "vulnStatus": "Modified",
  "descriptions": [
    {
      "lang": "en",
      "value": "The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5
        },
        "baseSeverity": "HIGH",
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:python_software_foundation:python:2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F19339B-AAA0-4042-895C-4A21C051285C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:python_software_foundation:python:2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0807131-7BF9-475F-B42B-25EFD46A96BA"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:python_software_foundation:python:2.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "080ED7C9-3348-49D8-937D-83A0D629374B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:python_software_foundation:python:2.3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "11523A7B-F557-4E74-B892-5F7D05FE973F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:python_software_foundation:python:2.3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3945EBB-D386-4995-BF95-A7AC5E163E1C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:python_software_foundation:python:2.3.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE249685-99F0-4ECB-A2E9-F3E306D87E02"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:python_software_foundation:python:2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "A9AFAD75-1916-44AC-825C-47F8BDC3A8F4"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=110746469728728&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://python.org/security/PSF-2005-001/patch-2.2.txt",
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "http://securitytracker.com/id?1013083",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2005/dsa-666",
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:035",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.python.org/security/PSF-2005-001/",
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2005-108.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/12437",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.trustix.org/errata/2005/0003/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19217",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9811",
      "source": "cve@mitre.org"
    }
  ]
}