CVE-2016-4000
"Samuel Schober" <[email protected]> Fri, 21 Jun 2019 12:57:52 +0200
| Newsgroups | gmane.comp.lang.jython.user |
|---|---|
| Message-ID | <trinity-3200de65-ffad-44f6-8c61-5b8816889cb0-1561114672125@3c-app-webde-bap50> |
--===============0767397039522719703== Content-Type: text/html; charset=UTF-8 <html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div> <p><span style="font-size:11pt"><span style="font-family:Calibri,sans-serif">Hello,</span></span></p> <p> </p> <p><span style="font-size:11pt"><span style="font-family:Calibri,sans-serif">I am using the jython package for an project and have a question about an issue you had.</span></span></p> <p> </p> <p><span style="font-size:11pt"><span style="font-family:Calibri,sans-serif">The used version is 2.5.3 and unfortunally it can not be updated to 2.7.1. Now I found the following issue: </span></span></p> <p><span style="font-size:11pt"><span style="font-family:Calibri,sans-serif"><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4000" style="color:#0563c1; text-decoration:underline">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4000</a></span></span></p> <p> </p> <p><span style="font-size:11pt"><span style="font-family:Calibri,sans-serif">It notices that jython allows attackers to execute arbitrary code and I wanted to ask what kind of code could be executed?</span></span></p> <p><span style="font-size:11pt"><span style="font-family:Calibri,sans-serif">Is it only python code which could be executed or is it possible to execute any kind of binary code? </span></span></p> <p><span style="font-size:11pt"><span style="font-family:Calibri,sans-serif">And is it possible to have influence on the server outside of the application or does it just affect my application?</span></span></p> <p> </p> <p><span style="font-size:11pt"><span style="font-family:Calibri,sans-serif">I hope you can help me with that question.</span></span></p> <p> </p> <p><span style="font-size:11pt"><span style="font-family:Calibri,sans-serif">Best regards,</span></span></p> <p><span style="font-size:11pt"><span style="font-family:Calibri,sans-serif">Samuel Schober</span></span></p> </div></div></body></html> --===============0767397039522719703== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============0767397039522719703== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Jython-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jython-users --===============0767397039522719703==--