PT-2003-1982 · Apache · Httpd+1

Published 2003-12-02 · Updated 2017-10-11 · CVE-2003-0973

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions mod python versions 2.7.x through 2.7.8 mod python versions 3.0.x through 3.0.3

Description A denial of service issue exists, allowing remote attackers to cause the httpd server to crash via a certain query string.

Recommendations For mod python versions 2.7.x through 2.7.8, update to version 2.7.9 or later. For mod python versions 3.0.x through 3.0.3, update to version 3.0.4 or later.

Fix

Related Identifiers

CVE-2003-0973

DSA-452

RHSA-2004:058

Affected Products

Httpd

Mod Python

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2003-0973 · Security Note
• http://modpython.org/pipermail/mod_python/2003-November/004005.html · Patch
• http://redhat.com/support/errata/RHSA-2004-063.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-058.html · Vendor Advisory
• http://bugzilla.fedora.us/show_bug.cgi?id=1325 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000837 · Vendor Advisory
• http://debian.org/security/2004/dsa-452 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A839 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A828 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0973 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10259 · Note