CVE-2005-0089: The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC server...

Security readout for executives and security teams

This is a legacy Python XML-RPC server flaw. If an organization still runs affected Python versions with vulnerable SimpleXMLRPCServer usage, a remote attacker could access or change internal module state and possibly gain code execution. Risk is concentrated in old, exposed services rather than modern Python installations. Likely exposure is limited to legacy XML-RPC servers using affected Python versions and the specific register_instance pattern. Internet-facing management, automation, or internal RPC endpoints from that era deserve priority review. Treat this as a targeted legacy-risk item. It is high impact if present on an exposed service, but urgent remediation depends on whether obsolete Python XML-RPC servers still exist in the environment. Mitigation focus: Upgrade affected Python packages using vendor or Python security advisories.; Retire unsupported Python 2 services where possible.; Review SimpleXMLRPCServer usage for register_instance without _dispatch..

Prepared

Jun 30, 2026, 01:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.