PT-2002-1259 · Apache · Mod Python

Publicado 2002-05-16 · Atualizado 2008-09-05 · CVE-2002-0185

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions mod python versions 2.7.6 and earlier

Description The issue allows a module indirectly imported by a published module to be accessed via the publisher. This enables remote attackers to call potentially dangerous functions from the imported module.

Recommendations For mod python versions 2.7.6 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-0185

Produtos afetados

Mod Python

Referências · 8

• http://securityfocus.com/bid/4656 · Nota
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000477 · Aviso do Fabricante
• http://modpython.org/pipermail/mod_python/2002-April/001991.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0185 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0185 · Nota de Segurança
• http://iss.net/security_center/static/8997.php · Nota
• http://redhat.com/support/errata/RHSA-2002-070.html · Aviso do Fabricante
• http://modpython.org/pipermail/mod_python/2002-April/002003.html · Aviso do Fabricante