Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Python 代码问题漏洞
Vulnerability Description
Python是Python基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。 Python 2.6 存在代码问题漏洞。当argv[0]自变量没有包含一个路径分隔符时，该漏洞会预谋一个对sys.path的空字符串。这使得本地用户可以借助目前正在工作的目录中的一个特洛伊木马python文件，执行任意的代码。
CVSS Information
N/A
Vulnerability Type
N/A