CVE-2005-0089
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML...
CVE-2005-0089 is a high vulnerability (CVSS 7.5) in Python, published February 4, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.00%, the 93rd percentile. Fixed in python2.2 2.2.1-4.7.
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.
Exploit likelihood
What each source reports
NVD Score used
7.5
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.
- Record
CVE-2005-0089- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.
- Record
CVE-2005-0089- Updated
- 2026-11-02
EUVDEUVD-2005-0090 No score
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.
- Record
EUVD-2005-0090- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w2rh-7p2w-889c No score
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML...
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.
- Record
GHSA-w2rh-7p2w-889c- Updated
- 2026-11-02
OSVAZL-109545 No score
CVE-2005-0089 affecting package python-py 1.11.0-1
The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the register_instance method to register an object without a _dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes.
- Record
AZL-109545- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-pyAzure Linux:3 |
through 1.11.0-1 | None known |
python2.2Debian:3.0 |
before 2.2.1-4.7, plus listed versions 2.2.1-4.6 |
2.2.1-4.7 |
pythonRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-develRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-docsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-toolsRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
tkinterRed Hat:enterprise_linux:4::as |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
pythonRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
Show 36 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-develRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-docsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-toolsRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
tkinterRed Hat:enterprise_linux:4::desktop |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
pythonRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-develRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-docsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-toolsRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
tkinterRed Hat:enterprise_linux:4::es |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
pythonRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-develRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-docsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
python-toolsRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
tkinterRed Hat:enterprise_linux:4::ws |
before 0:2.3.4-14.1 | 0:2.3.4-14.1 |
pythonRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
python-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
python-develRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
python-toolsRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
tkinterRed Hat:enterprise_linux:3::as |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
pythonRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
python-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
python-develRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
python-toolsRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
tkinterRed Hat:enterprise_linux:3::desktop |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
pythonRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
python-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
python-develRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
python-toolsRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
tkinterRed Hat:enterprise_linux:3::es |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
pythonRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
python-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
python-develRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
python-toolsRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
tkinterRed Hat:enterprise_linux:3::ws |
before 0:2.2.3-6.1 | 0:2.2.3-6.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securitytracker.com/id?1013083
exchange.xforce.ibmcloud.com/vulnerabilities/19217
python.org/security/PSF-2005-001
marc.info?l=bugtraq&m=110746469728728&w=2
trustix.org/errata/2005/0003
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9811
Show 18 moreShow less
securityfocus.com/bid/12437
secunia.com/advisories/14128
debian.org/security/2005/dsa-666
python.org/security/PSF-2005-001/patch-2.2.txt
mandriva.com/security/advisories?name=MDKSA-2005:035
redhat.com/support/errata/RHSA-2005-108.html
nvd.nist.gov/vuln/detail/CVE-2005-0089
github.com/advisories/GHSA-w2rh-7p2w-889c
access.redhat.com/errata/RHSA-2005:108
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=146649
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_108.json
access.redhat.com/security/cve/CVE-2005-0089
bugzilla.redhat.com/show_bug.cgi?id=1617451
cve.org/CVERecord?id=CVE-2005-0089
access.redhat.com/errata/RHSA-2005:109
bugzilla.redhat.com/show_bug.cgi?id=146645
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_109.json