[issue672656] securing pydoc server

[Devin Cook]

Devin Cook added the comment:

Sure, thanks.

New issue: http://bugs.python.org/issue22421

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue672656] securing pydoc server

[Ned Deily]

Ned Deily added the comment:

Devin, please open a new issue describing the current problem you see.  
Comments to long-closed issues will likely be overlooked.

--
nosy: +ned.deily

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue672656] securing pydoc server

[Devin Cook]

Devin Cook added the comment:

It looks like this bug was reintroduced in a5a3ae9be1fb.

--
nosy: +devin

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue672656] securing pydoc server

[Senthil Kumaran]

Senthil Kumaran  added the comment:

As the pydoc server "advertises" that it is running from localhost in both CLI 
and GUI, it is best to bind the socket to 'localhost' instead of '' (which 
would bind it to all the interfaces).

So, a simple fix for this issue, which will remove the security concern:
 host = 'localhost'
-self.address = ('', port)
+self.address = (host, port)

If is to be run from user-defined interface with a new --host  
option, that it can be dealt with as new feature request.

This issue can be considered fixed with commits r84173 and r84174.

--
nosy: +orsenthil
resolution:  -> fixed
stage: unit test needed -> committed/rejected
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue672656] securing pydoc server

[Mark Lawrence]

Mark Lawrence  added the comment:

This looks weird, a security issue with a low priority???

--
nosy: +BreamoreBoy

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue672656] securing pydoc server

[Daniel Diniz]

Changes by Daniel Diniz :


--
priority: normal -> low
stage:  -> test needed
type:  -> security
versions: +Python 2.7, Python 3.1

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com