RHEL 4 : mod_python (RHSA-2005:100)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:100 advisory. Modpython is a module that embeds the Python language interpreter within the Apache web server, allowing handlers to be written in Python. Graham...

mod_python vulnerable to information disclosure via crafted URL

Overview The Apache modpython module is vulnerable to unintended remote information disclosure using specially crafted URLs. Description From the modpython web page:Modpython is an Apache module that embeds the Python interpreter within the server. With modpython you can write web-based...

Moderate: Red Hat Security Advisory: mod_python security update

An updated modpython package that fixes a security issue in the publisher handle is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Modpython is a module that embeds the Python language interpreter...

GLSA-200502-14 : mod_python: Publisher Handler vulnerability

The remote host is affected by the vulnerability described in GLSA-200502-14 modpython: Publisher Handler vulnerability Graham Dumpleton discovered a vulnerability in modpython's Publisher Handler. Impact : By requesting a specially crafted URL for a published module page, an attacker could obtai...

mod_python: Publisher Handler vulnerability

Background modpython is an Apache module that embeds the Python interpreter within the server allowing Python-based web-applications to be created. Description Graham Dumpleton discovered a vulnerability in modpython's Publisher Handler. Impact By requesting a specially crafted URL for a publishe...

USN-80-1: mod_python vulnerability

Graham Dumpleton discovered an information disclosure in the "publisher" handle of modpython. By requesting a carefully crafted URL for a published module page, anybody can obtain extra information about internal variables, objects, and other information which is not intended to be visible...

security flaw

The publisher handler for modpython 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL...

Moderate: Red Hat Security Advisory: mod_python security update

An Updated modpython package that fixes a security issue in the publisher handler is now available. Modpython is a module that embeds the Python language interpreter within the Apache web server, allowing handlers to be written in Python. Graham Dumpleton discovered a flaw affecting the publisher...

CVE-2005-0088

CVE-2005-0088 affects mod_python 2.7.8 and earlier, where the publisher handler permits remote attackers to obtain access to restricted objects via a crafted URL. The CVSS v2 base metrics show a Network attack vector, Low attack complexity, No authentication, and a Partial impact on confidentiali...

CVE-2005-0088

The publisher handler for modpython 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL...

CVE-2005-0088

The publisher handler for modpython 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL...

Apache mod_python < 3.1.4 Information Disclosure

Binary data 2608.prm...

Fedora Core 3 : mod_python-3.1.3-5.2 (2005-140)

Graham Dumpleton discovered a flaw affecting the publisher handler of modpython, used to make objects inside modules callable via URL. A remote user could visit a carefully crafted URL that would gain access to objects that should not be visible, leading to an information leak. The Common...

Fedora Core 2 : mod_python-3.1.3-1.fc2.2 (2005-139)

Graham Dumpleton discovered a flaw affecting the publisher handler of modpython, used to make objects inside modules callable via URL. A remote user could visit a carefully crafted URL that would gain access to objects that should not be visible, leading to an information leak. The Common...

RHEL 2.1 / 3 : mod_python (RHSA-2005:104)

An Updated modpython package that fixes a security issue in the publisher handler is now available. Modpython is a module that embeds the Python language interpreter within the Apache web server, allowing handlers to be written in Python. Graham Dumpleton discovered a flaw affecting the publisher...

CVE-2005-0088: Undefined Security Weakness

The publisher handler for modpython 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL...

mod_python -- information leakage vulnerability

Mark J Cox reports: Graham Dumpleton discovered a flaw which can affect anyone using the publisher handle of the Apache Software Foundation modpython. The publisher handle lets you publish objects inside modules to make them callable via URL. The flaw allows a carefully crafted URL to obtain extr...

CVE-2004-2680

modpython libapache2-mod-python 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to return portions of previously freed memory...

CVE-2004-2680

modpython libapache2-mod-python 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to return portions of previously freed memory...

DEBIAN-CVE-2004-2680

modpython libapache2-mod-python 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to return portions of previously freed memory...