Description
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.
Published: 2006-10-09
Score: 7.5 High
EPSS: 1.1% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-1197-1 New python2.4 packages fix arbitrary code execution
Debian DSA Debian DSA DSA-1198-1 New python2.3 packages fix arbitrary code execution
EUVD EUVD EUVD-2006-4966 Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.
Ubuntu USN Ubuntu USN USN-359-1 Python vulnerability
References
Link Providers
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc cve-icon cve-icon
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391589 cve-icon cve-icon
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=208162 cve-icon cve-icon
http://kb.vmware.com/KanisaPlatform/Publishing/882/5120103_f.SAL_Public.html cve-icon cve-icon
http://secunia.com/advisories/22276 cve-icon cve-icon
http://secunia.com/advisories/22297 cve-icon cve-icon
http://secunia.com/advisories/22303 cve-icon cve-icon
http://secunia.com/advisories/22357 cve-icon cve-icon
http://secunia.com/advisories/22358 cve-icon cve-icon
http://secunia.com/advisories/22379 cve-icon cve-icon
http://secunia.com/advisories/22448 cve-icon cve-icon
http://secunia.com/advisories/22487 cve-icon cve-icon
http://secunia.com/advisories/22512 cve-icon cve-icon
http://secunia.com/advisories/22531 cve-icon cve-icon
http://secunia.com/advisories/22639 cve-icon cve-icon
http://secunia.com/advisories/23680 cve-icon cve-icon
http://secunia.com/advisories/31492 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200610-07.xml cve-icon cve-icon
http://securitytracker.com/id?1017019 cve-icon cve-icon
http://sourceforge.net/tracker/index.php?func=detail&aid=1541585&group_id=5470&atid=305470 cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2006-229.htm cve-icon cve-icon
http://www.debian.org/security/2006/dsa-1197 cve-icon cve-icon
http://www.debian.org/security/2006/dsa-1198 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDKSA-2006:181 cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2006_25_sr.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2006-0713.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0629.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/448244/100/100/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/456546/100/200/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/20376 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-359-1 cve-icon cve-icon
http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html cve-icon cve-icon
http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2006/3940 cve-icon cve-icon
http://www.vupen.com/english/advisories/2006/5131 cve-icon cve-icon
http://zoehep.xent.com/~bsittler/python2.4-2.4.3_unicodeobject.c.diff cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/29408 cve-icon cve-icon
https://issues.rpath.com/browse/RPL-702 cve-icon cve-icon
https://launchpad.net/distros/ubuntu/+source/python2.4/+bug/56633 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2006-4980 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10789 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2006-4980 cve-icon
History

No history.

Subscriptions

Python Python
Redhat Enterprise Linux Network Satellite
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T19:32:22.516Z

Reserved: 2006-09-25T00:00:00.000Z

Link: CVE-2006-4980

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2006-10-10T04:06:00.000

Modified: 2026-04-23T00:35:47.467

Link: CVE-2006-4980

cve-icon Redhat

Severity : Important

Publid Date: 2006-08-16T00:00:00Z

Links: CVE-2006-4980 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses