Every CVE Search/ Get API key

CVE-2011-1015

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0...

5.0 Medium

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.

Exploit likelihood

3.80%Unchanged since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.

Record
CVE-2011-1015
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.

Record
CVE-2011-1015
Updated
2026-11-02
EUVDEUVD-2011-1032 No score

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.

Record
EUVD-2011-1032
Updated
2026-11-03
GitHub AdvisoriesGHSA-76v4-rfvh-v87h No score

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0...

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.

Record
GHSA-76v4-rfvh-v87h
Weakness
CWE-200
Updated
2026-11-02
OSVPSF-2011-1 No score

CGI directory traversal (is_cgi() function)

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.

Record
PSF-2011-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
python2.6
Debian:6.0
From an advisory covering 8 CVEs
 before 2.6.6-8+deb6u1, plus listed versions
2.6.6-8
2.6.6-8+deb6u1
python
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-docs
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-tools
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
tkinter
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
Show 59 moreShow less
Affected packages
PackageAffectedFixed
python-docs
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-tools
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
tkinter
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-docs
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-tools
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
tkinter
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-docs
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-tools
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
tkinter
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-libs
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-tools
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
tkinter
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-libs
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-tools
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
tkinter
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-test
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-tools
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-libs
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
tkinter
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-test
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-tools
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
tkinter
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-libs
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-test
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-tools
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
tkinter
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-docs
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-2.el6
0:2.6.6-2.el6
python-libs
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-test
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-tools
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-docs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-2.el6
0:2.6.6-2.el6
python-libs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
tkinter
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1015 is a medium vulnerability (CVSS 5.0) in Python, published May 9, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.80%, the 90th percentile. No source names a fixed version.

References

Show 56 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open