CVE-2005-3008

Description

Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes.

Affected products

• amar_sagoo / tofu0.2 – 0.2

References

• MISChttp://www.osvdb.org/19570
• VENDOR_ADVISORYhttp://secunia.com/advisories/16876
• MISChttp://soya.literati.org/
• MISChttp://www.securityfocus.com/bid/14865