Description
Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes.
References
- 19570 vdb-entry
- 16876 third-party-advisory
- http://soya.literati.org/
- 14865 vdb-entry
Unscored
CVE-2005-3008
EUVD-2005-3008GHSA-h8p4-p3hv-mq9r
Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes.
Published Sep 21, 2005 · Updated Aug 7, 2024 · Assigned by mitre