CVE:CVE-2013-5123
CNNVD:CNNVD-201512-681
Python是Python软件基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。Pip是一套用于安装和管理Python软件包的工具。
Python Pip 1.5之前版本中存在安全漏洞。攻击者可利用该漏洞绕过安全限制，执行未授权操作。
solution:Upgrade pypa pip to a higher version than 1.5,and avoid the version (,1.5); Upgrade virtualenv virtualenv to a higher version than 12.0.7,and avoid the version 12.0.7; Upgrade fedoraproject fedora to a higher version than 20,21,and avoid the version 20,21; Upgrade redhat openshift to a higher version than 1.0,2.0,and avoid the version 1.0,2.0; Upgrade redhat software_collections to a higher version than -; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0