Home / Vulnerability Database / Python : Obsolete or unsafe function
Python

Python : Obsolete or unsafe function

Overview

The function used is deprecated or unsafe (regardless of how it is used). It is recommended to replace it with a secure analog.

The smtplib library in CPython (aka Python) before 2.7.12, 3.x to 3.4.5, and 3.5.x to 3.5.2 does not return an error if the SMTP.starttls(), which can allow “man-in-the-middle” attacks to bypass the protection of TLS. I.e., using the network location between the client and the registry, block the StartTLS command.

MEDIUM

DerScanner Severity Score

Do you want to fix Python : Obsolete or unsafe function in your application?

See also

Python

Python : Debug mode on

Python

Python : Web3: Deprecated method

Python

Python : Unsafe padding