Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Python | Python | 2.4.0 (including) | 2.4.0 (including) |
| Python | Python | 2.5.0 (including) | 2.5.0 (including) |
| Red Hat Enterprise Linux 2.1 | RedHat | python-0:1.5.2-43.72.2 | * |
| Red Hat Enterprise Linux 3 | RedHat | python-0:2.2.3-6.8 | * |
| Red Hat Enterprise Linux 4 | RedHat | python-0:2.3.4-14.4.el4_6.1 | * |
| Red Hat Enterprise Linux 5 | RedHat | python-0:2.4.3-24.el5_3.6 | * |
| Red Hat Network Satellite Server v 4.2 | RedHat | rhn-solaris-bootstrap-0:5.0.2-3 | * |
| Red Hat Network Satellite Server v 4.2 | RedHat | rhn_solaris_bootstrap_5_0_2_3-0:1-0 | * |
| Red Hat Network Satellite Server v 4.2 (RHEL3) | RedHat | rhn-solaris-bootstrap-0:5.0.2-3 | * |
| Red Hat Network Satellite Server v 4.2 (RHEL3) | RedHat | rhn_solaris_bootstrap_5_0_2_3-0:1-0 | * |
| Red Hat Network Satellite Server v 5.0 | RedHat | rhn-solaris-bootstrap-0:5.0.2-3 | * |
| Red Hat Network Satellite Server v 5.0 | RedHat | rhn_solaris_bootstrap_5_0_2_3-0:1-0 | * |
| Red Hat Network Satellite Server v 5.1 | RedHat | rhn-solaris-bootstrap-0:5.1.1-3 | * |
| Red Hat Network Satellite Server v 5.1 | RedHat | rhn_solaris_bootstrap_5_1_1_3-0:1-0 | * |
| Python2.4 | Ubuntu | dapper | * |
| Python2.4 | Ubuntu | edgy | * |
| Python2.4 | Ubuntu | upstream | * |
| Python2.5 | Ubuntu | edgy | * |
| Python2.5 | Ubuntu | upstream | * |