CVE-2009-0367
Published Mar 5, 2009
Last updated 7 years ago
Overview
- Description
- The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB71E24E-1A08-491F-8379-FE41AF012E90"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0B57803-62E1-4F50-92DD-6796C6D60758"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5D83E56-BE05-4DF7-88AD-BC0AD5098415"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "621115C3-5AF6-4709-BB0B-A0FE481C5C79"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE1549F8-FE6A-49E5-BC19-585C4957E061"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FD5F86E-F65D-4114-9057-A81B360BE143"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "256B2C75-47E5-4A8F-9672-B56D17086764"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECD02FB1-72CD-42A3-8E7C-910490467A0A"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15627E66-D852-4F68-9C9A-3EAF5B805BC5"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "415FE737-8F89-463D-9F1D-EF5EDACFCD6F"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1941BB00-8039-4DD8-815A-1AE0CA986C70"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D091DF5-3229-43E0-BEC4-754992B8DD5C"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77F8C56F-1F74-4F40-85D8-DA861DE4DB5C"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1E58D08-F602-4BE6-978D-34B58E9188B7"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.5.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51001322-B437-4A1C-83BA-C8E3C3BCE7CF"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.5.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A991E343-0C44-4F37-80EE-5C0E45EDA909"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.5.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C4223A3-6F43-4774-8579-59868FB5074B"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.5.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA5792D1-F342-41F2-B056-D8BA99F5C80E"
},
{
"criteria": "cpe:2.3:a:wesnoth:wesnoth:1.5.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EDB1AAF-2513-4511-9E28-E0E9ACF74C19"
}
],
"operator": "OR"
}
]
}
]