CVE-2013-1633

Related Files

Gentoo Linux Security Advisory 201310-09

Posted Oct 10, 2013

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201310-9 - A vulnerability in Setuptools could allow remote attackers to perform man-in-the-middle attacks. Versions less than 0.8-r1 are affected.

tags | advisory, remote

systems | linux, gentoo

advisories | CVE-2013-1633

SHA-256 | a516d6146224c13ff1a4bd4df27d5ac0e23653bec067dadc0731ba30c6122a4e

Download | Favorite | View

Mandriva Linux Security Advisory 2013-227

Posted Sep 9, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-227 - A vulnerability has been discovered and corrected in easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product. The updated python-setuptools packages has been upgraded to the 0.9.8 version and the python-virtualenv packages has been upgraded to the 1.10.1 version which is not vulnerable to this issue.

tags | advisory, web, arbitrary, python

systems | linux, mandriva

advisories | CVE-2013-1633

SHA-256 | d56f8c3565be8c63463cce4e0e9d65136463c2d516b30db8705d1224c10d780d

Download | Favorite | View