109 matches found
CVE-2003-0973: Undefined Security Weakness
Unknown vulnerability in modpython 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service httpd crash via a certain query string...
mod_python denial-of-service vulnerability in parse_qs
An attacker may cause Apache with modpython to crash by using a specially constructed query string...
CVE-2002-0185
modpython version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module...
CVE-2002-0185
The CVE-2002-0185 issue affects Apache mod_python versions 2.7.6 and earlier, where a module indirectly imported by a published module can be accessed via the publisher, allowing remote attackers to call potentially dangerous functions from the imported module. The OpenVAS/NVD/CVE listings corrob...
CVE-2002-0185: Undefined Security Weakness
modpython version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module...
CVE-2002-0185
modpython version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module...
[RHSA-2002:070-06] Updated mod_python packages available
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated modpython packages available Advisory ID: RHSA-2002:070-06 Issue date: 2002-04-22 Updated on: 2002-05-02 Product: Red Hat Linux Keywords: modpython publisher imported...
mod_python imported modules inderect calls
It's possible to inderectly call unsafe function via imported module...
mod_python < 2.7.8 Module Importing Privilege Function Execution
The remote host is using the Apache modpython module which is version 2.7.6 or older. These versions allow a module which is indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module...