Lucene search
PRIOn knowledge basePRION:CVE-2014-0240HistoryMay 27, 2014 - 2:55 p.m.
Code injection
2014-05-2714:55:00
PRIOn knowledge base
www.prio-n.com
3
The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes.
References
blog.dscpl.com.au/2014/05/security-release-for-modwsgi-version-35.html
modwsgi.readthedocs.org/en/latest/release-notes/version-3.5.html
rhn.redhat.com/errata/RHSA-2014-0789.html
secunia.com/advisories/59551
secunia.com/advisories/60094
www.openwall.com/lists/oss-security/2014/05/21/1
www.securityfocus.com/bid/67532
Related
nessus
nessus
RHEL 7 : mod_wsgi (RHSA-2014:1091)
2014-08-26 00:00:00
Apache mod_wsgi < 3.5 Apache Process Privilege Escalation
2014-07-14 00:00:00
CentOS 7 : mod_wsgi (CESA-2014:1091)
2014-08-26 00:00:00
debiancve
debiancve
CVE-2014-0240
2014-05-27 15:00:00
nvd
nvd
CVE-2014-0240
2014-05-27 14:55:12
centos
centos
mod_wsgi security update
2014-08-25 12:17:55
mod_wsgi security update
2014-06-25 19:01:10
cvelist
cvelist
CVE-2014-0240
2014-05-27 15:00:00
redhat
redhat
(RHSA-2014:1091) Important: mod_wsgi security update
2014-08-25 00:00:00
(RHSA-2014:0789) Important: python27-mod_wsgi and python33-mod_wsgi security update
2014-06-25 00:00:00
(RHSA-2014:0788) Important: mod_wsgi security update
2014-06-25 00:00:00
ubuntucve
ubuntucve
CVE-2014-0240
2014-05-23 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2014-1091)
2015-10-06 00:00:00
RedHat Update for mod_wsgi RHSA-2014:1091-01
2014-08-26 00:00:00
CentOS Update for mod_wsgi CESA-2014:1091 centos7
2014-09-10 00:00:00
cve
cve
CVE-2014-0240
2014-05-27 15:00:00
oraclelinux
oraclelinux
mod_wsgi security update
2014-08-25 00:00:00
mod_wsgi security update
2014-06-25 00:00:00
veracode
veracode
Privilege Escalation
2019-01-15 08:54:30
amazon
amazon
Important: mod24_wsgi
2014-07-09 23:02:00
Important: mod_wsgi
2014-07-09 23:07:00
osv
osv
mod-wsgi - security update
2014-05-27 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: mod_wsgi-3.5-1.fc20
2014-06-17 23:26:05
[SECURITY] Fedora 19 Update: mod_wsgi-3.5-1.fc19
2014-06-17 23:35:19
debian
debian
[SECURITY] [DSA 2937-1] mod-wsgi security update
2014-05-27 14:35:16
ubuntu
ubuntu
mod_wsgi vulnerabilities
2014-05-26 00:00:00
gentoo
gentoo
mod_wsgi: Privilege escalation
2014-12-13 00:00:00
securityvulns
securityvulns
mod-wsgi security vulnerabilities
2014-05-29 00:00:00
[SECURITY] [DSA 2937-1] mod-wsgi security update
2014-05-29 00:00:00