Risk | High |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2007-4559 |
CWE-ID | CWE-22 |
Exploitation vector | Network |
Public exploit | Public exploit code for vulnerability #1 is available. |
Vulnerable software |
Python 3 Module Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing 15 Operating systems & Components / Operating system SUSE Linux Enterprise Desktop 15 Operating systems & Components / Operating system openSUSE Leap Operating systems & Components / Operating system SUSE Manager Retail Branch Server Operating systems & Components / Operating system SUSE Manager Server Operating systems & Components / Operating system SUSE Manager Proxy Operating systems & Components / Operating system python310-32bit Operating systems & Components / Operating system package or component libpython3_10-1_0-32bit Operating systems & Components / Operating system package or component libpython3_10-1_0-32bit-debuginfo Operating systems & Components / Operating system package or component python310-base-32bit-debuginfo Operating systems & Components / Operating system package or component python310-base-32bit Operating systems & Components / Operating system package or component python310-32bit-debuginfo Operating systems & Components / Operating system package or component python310-doc Operating systems & Components / Operating system package or component python310-dbm Operating systems & Components / Operating system package or component python310-curses-debuginfo Operating systems & Components / Operating system package or component libpython3_10-1_0-debuginfo Operating systems & Components / Operating system package or component python310-base-debuginfo Operating systems & Components / Operating system package or component python310-tools Operating systems & Components / Operating system package or component python310 Operating systems & Components / Operating system package or component python310-tk Operating systems & Components / Operating system package or component libpython3_10-1_0 Operating systems & Components / Operating system package or component python310-core-debugsource Operating systems & Components / Operating system package or component python310-dbm-debuginfo Operating systems & Components / Operating system package or component python310-testsuite Operating systems & Components / Operating system package or component python310-debugsource Operating systems & Components / Operating system package or component python310-idle Operating systems & Components / Operating system package or component python310-curses Operating systems & Components / Operating system package or component python310-tk-debuginfo Operating systems & Components / Operating system package or component python310-testsuite-debuginfo Operating systems & Components / Operating system package or component python310-doc-devhelp Operating systems & Components / Operating system package or component python310-devel Operating systems & Components / Operating system package or component python310-base Operating systems & Components / Operating system package or component python310-debuginfo Operating systems & Components / Operating system package or component |
Vendor | SUSE |
Security Bulletin
This security bulletin contains one high risk vulnerability.
EUVDB-ID: #VU67583
Risk: High
CVSSv4.0: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/U:Amber]
CVE-ID: CVE-2007-4559
CWE-ID:
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to compromise the affected system.
The
vulnerability exists due to improper validation of filenames in the
tarfile module in Python. A remote attacker can
create a specially crafted archive with symbolic links inside or
filenames that contain directory traversal characters (e.g. "..") and
overwrite arbitrary files on the system.
Update the affected package python310 to the latest version.
Vulnerable software versionsPython 3 Module: 15-SP4
SUSE Linux Enterprise Server for SAP Applications 15: SP4
SUSE Linux Enterprise Server 15: SP4
SUSE Linux Enterprise High Performance Computing 15: SP4
SUSE Linux Enterprise Desktop 15: SP4
openSUSE Leap: 15.4 - 15.5
SUSE Manager Retail Branch Server: 4.3
SUSE Manager Server: 4.3
SUSE Manager Proxy: 4.3
python310-32bit: before 3.10.11-150400.4.25.1
libpython3_10-1_0-32bit: before 3.10.11-150400.4.25.1
libpython3_10-1_0-32bit-debuginfo: before 3.10.11-150400.4.25.1
python310-base-32bit-debuginfo: before 3.10.11-150400.4.25.1
python310-base-32bit: before 3.10.11-150400.4.25.1
python310-32bit-debuginfo: before 3.10.11-150400.4.25.1
python310-doc: before 3.10.11-150400.4.25.1
python310-dbm: before 3.10.11-150400.4.25.1
python310-curses-debuginfo: before 3.10.11-150400.4.25.1
libpython3_10-1_0-debuginfo: before 3.10.11-150400.4.25.1
python310-base-debuginfo: before 3.10.11-150400.4.25.1
python310-tools: before 3.10.11-150400.4.25.1
python310: before 3.10.11-150400.4.25.1
python310-tk: before 3.10.11-150400.4.25.1
libpython3_10-1_0: before 3.10.11-150400.4.25.1
python310-core-debugsource: before 3.10.11-150400.4.25.1
python310-dbm-debuginfo: before 3.10.11-150400.4.25.1
python310-testsuite: before 3.10.11-150400.4.25.1
python310-debugsource: before 3.10.11-150400.4.25.1
python310-idle: before 3.10.11-150400.4.25.1
python310-curses: before 3.10.11-150400.4.25.1
python310-tk-debuginfo: before 3.10.11-150400.4.25.1
python310-testsuite-debuginfo: before 3.10.11-150400.4.25.1
python310-doc-devhelp: before 3.10.11-150400.4.25.1
python310-devel: before 3.10.11-150400.4.25.1
python310-base: before 3.10.11-150400.4.25.1
python310-debuginfo: before 3.10.11-150400.4.25.1
CPE2.3https://www.suse.com/support/update/announcement/2023/suse-su-20232463-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.