CVE 2008-0252
Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/
Related bugs and status
CVE-2008-0252 (Candidate) is related to these bugs:
Bug #187481: [CVE-2008-0252] Directory traversal vulnerability allows modification of arbitrary files
Bug #191198: [python-cherrypy] [CVE-2008-0252] missing input sanitising, remote vulnerability
Summary | In | Importance | Status | |||
---|---|---|---|---|---|---|
191198 | [python-cherrypy] [CVE-2008-0252] missing input sanitising, remote vulnerability | python-cherrypy (Ubuntu) | Undecided | Fix Released | ||
191198 | [python-cherrypy] [CVE-2008-0252] missing input sanitising, remote vulnerability | python-cherrypy (Ubuntu Dapper) | Undecided | Confirmed | ||
191198 | [python-cherrypy] [CVE-2008-0252] missing input sanitising, remote vulnerability | python-cherrypy (Ubuntu Edgy) | Undecided | Confirmed | ||
191198 | [python-cherrypy] [CVE-2008-0252] missing input sanitising, remote vulnerability | python-cherrypy (Ubuntu Hardy) | Undecided | Fix Released | ||
191198 | [python-cherrypy] [CVE-2008-0252] missing input sanitising, remote vulnerability | python-cherrypy (Ubuntu Feisty) | Undecided | Confirmed | ||
191198 | [python-cherrypy] [CVE-2008-0252] missing input sanitising, remote vulnerability | python-cherrypy (Ubuntu Gutsy) | Undecided | Confirmed |
See the
CVE page on Mitre.org
for more details.