Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-0240
HistoryMay 27, 2014 - 2:55 p.m.

CVE-2014-0240

2014-05-2714:55:12
CWE-264
[email protected]
web.nvd.nist.gov

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes.

Affected configurations

NVD
Node
modwsgimod_wsgiRange≤3.4
OR
modwsgimod_wsgiMatch1.0
OR
modwsgimod_wsgiMatch1.1
OR
modwsgimod_wsgiMatch1.2
OR
modwsgimod_wsgiMatch1.3
OR
modwsgimod_wsgiMatch1.4
OR
modwsgimod_wsgiMatch1.5
OR
modwsgimod_wsgiMatch1.6
OR
modwsgimod_wsgiMatch2.0
OR
modwsgimod_wsgiMatch2.1
OR
modwsgimod_wsgiMatch2.2
OR
modwsgimod_wsgiMatch2.3
OR
modwsgimod_wsgiMatch2.4
OR
modwsgimod_wsgiMatch2.5
OR
modwsgimod_wsgiMatch2.6
OR
modwsgimod_wsgiMatch2.7
OR
modwsgimod_wsgiMatch2.8
OR
modwsgimod_wsgiMatch3.0
OR
modwsgimod_wsgiMatch3.1
OR
modwsgimod_wsgiMatch3.2
OR
modwsgimod_wsgiMatch3.3

Related

nessus 18
centos 2
debiancve 1
cvelist 1
redhat 3
openvas 14
ubuntucve 1
cve 1
oraclelinux 2
veracode 1
prion 1
amazon 2
debian 1
fedora 2
osv 1
ubuntu 1
gentoo 1
securityvulns 2
nessus
nessus
RHEL 7 : mod_wsgi (RHSA-2014:1091)
2014-08-26 00:00:00
Apache mod_wsgi < 3.5 Apache Process Privilege Escalation
2014-07-14 00:00:00
CentOS 7 : mod_wsgi (CESA-2014:1091)
2014-08-26 00:00:00
centos
centos
mod_wsgi security update
2014-08-25 12:17:55
mod_wsgi security update
2014-06-25 19:01:10
debiancve
debiancve
CVE-2014-0240
2014-05-27 15:00:00
cvelist
cvelist
CVE-2014-0240
2014-05-27 15:00:00
redhat
redhat
(RHSA-2014:1091) Important: mod_wsgi security update
2014-08-25 00:00:00
(RHSA-2014:0789) Important: python27-mod_wsgi and python33-mod_wsgi security update
2014-06-25 00:00:00
(RHSA-2014:0788) Important: mod_wsgi security update
2014-06-25 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2014-1091)
2015-10-06 00:00:00
RedHat Update for mod_wsgi RHSA-2014:1091-01
2014-08-26 00:00:00
CentOS Update for mod_wsgi CESA-2014:1091 centos7
2014-09-10 00:00:00
ubuntucve
ubuntucve
CVE-2014-0240
2014-05-23 00:00:00
cve
cve
CVE-2014-0240
2014-05-27 15:00:00
oraclelinux
oraclelinux
mod_wsgi security update
2014-08-25 00:00:00
mod_wsgi security update
2014-06-25 00:00:00
veracode
veracode
Privilege Escalation
2019-01-15 08:54:30
prion
prion
Code injection
2014-05-27 14:55:00
amazon
amazon
Important: mod24_wsgi
2014-07-09 23:02:00
Important: mod_wsgi
2014-07-09 23:07:00
debian
debian
[SECURITY] [DSA 2937-1] mod-wsgi security update
2014-05-27 14:35:16
fedora
fedora
[SECURITY] Fedora 20 Update: mod_wsgi-3.5-1.fc20
2014-06-17 23:26:05
[SECURITY] Fedora 19 Update: mod_wsgi-3.5-1.fc19
2014-06-17 23:35:19
osv
osv
mod-wsgi - security update
2014-05-27 00:00:00
ubuntu
ubuntu
mod_wsgi vulnerabilities
2014-05-26 00:00:00
gentoo
gentoo
mod_wsgi: Privilege escalation
2014-12-13 00:00:00
securityvulns
securityvulns
mod-wsgi security vulnerabilities
2014-05-29 00:00:00
[SECURITY] [DSA 2937-1] mod-wsgi security update
2014-05-29 00:00:00

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for NVD:CVE-2014-0240
nessus18centos2debiancve1cvelist1redhat3openvas14ubuntucve1cve1oraclelinux2veracode1prion1amazon2debian1fedora2osv1ubuntu1gentoo1securityvulns2