Approved changes feed: RSS · Atom

cpe:2.3:a:python:setuptools:0.6.40:*:*:*:*:*:*:*

part: a version: 0.6.40 update: *

VendorPython (b57ad93a-6195-5192-9423-6cfad6044a8b)
ProductSetuptools (43f7b15f-6553-581a-9552-2ceaa087ebf8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/pypy-setuptools purl2cpe 2026-06-01 10:16:28.387040
pkg:deb/debian/python-setuptools purl2cpe 2026-06-01 10:16:28.387043
pkg:deb/ubuntu/pypy-setuptools purl2cpe 2026-06-01 10:16:28.387046
pkg:deb/ubuntu/python-setuptools purl2cpe 2026-06-01 10:16:28.387049
pkg:github/pypa/setuptools purl2cpe 2026-06-01 10:16:28.387052
pkg:gitlab/python-setuptools purl2cpe 2026-06-01 10:16:28.387054
pkg:pypi/setuptools purl2cpe 2026-06-01 10:16:28.387057
pkg:rpm/fedora/python-setuptools purl2cpe 2026-06-01 10:16:28.387060
pkg:rpm/opensuse/python-setuptools purl2cpe 2026-06-01 10:16:28.387062

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1633 vulnerable 2026-06-03 14:32:50.525455 Details available
easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.
Published: 2013-08-06T01:00:00.000Z
Updated: 2024-09-16T23:00:21.247Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.