Public bug reported: Binary package hint: python-cherrypy
References: DSA-1481-1 (http://www.debian.org/security/2008/dsa-1481) Quoting: "It was discovered that a directory traversal vulnerability in CherryPy, a pythonic, object-oriented web development framework may lead to denial of service by deleting files through malicious session IDs in cookies." ** Affects: python-cherrypy (Ubuntu) Importance: Undecided Status: New ** Visibility changed to: Public ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-0252 -- [python-cherrypy] [CVE-2008-0252] missing input sanitising, remote vulnerability https://bugs.launchpad.net/bugs/191198 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs