RedHat Update for mod_wsgi RHSA-2014:1091-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : mod_wsgi (RHSA-2014:1091)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2014:1091 advisory. The modwsgi adapter is an Apache module that provides a WSGI-compliant interface for hosting Python-based web applications within Apache. It was foun...

CentOS 7 : mod_wsgi (CESA-2014:1091)

An updated modwsgi package that fixes one security issue is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Oracle Linux 7 : mod_wsgi (ELSA-2014-1091)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-1091 advisory. 3.4-12 - fix possible privilege escalation in setuid CVE-2014-0240 Tenable has extracted the preceding description block directly from the Oracle Linux security...

mod_wsgi security update

CentOS Errata and Security Advisory CESA-2014:1091 An updated modwsgi package that fixes one security issue is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score,...

mod_wsgi: possible privilege escalation in setuid() failure scenarios

It was found that modwsgi did not properly drop privileges if the call to setuid failed. If modwsgi was set up to allow unprivileged users to run WSGI applications, a local user able to run a WSGI application could possibly use this flaw to escalate their privileges on the system. Note: modwsgi i...

Important: Red Hat Security Advisory: mod_wsgi security update

An updated modwsgi package that fixes one security issue is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

mod_wsgi security update

3.4-12 - fix possible privilege escalation in setuid CVE-2014-0240...

MGASA-2014-0323 Updated apache-mod_wsgi package fixes security vulnerability

apache-modwsgi before 4.2.4 contained an off-by-one error in applying a limit to the number of supplementary groups allowed for a daemon process group. The result could be that if more groups than the operating system allowed were specified to the option supplementary-groups, then memory corrupti...

Updated apache-mod_wsgi package fixes security vulnerability

apache-modwsgi before 4.2.4 contained an off-by-one error in applying a limit to the number of supplementary groups allowed for a daemon process group. The result could be that if more groups than the operating system allowed were specified to the option supplementary-groups, then memory corrupti...

openSUSE Security Update : apache2-mod_wsgi (openSUSE-2014-470)

apache2-modwsgi was updated to fix a small of-by-one error in its use of setgroups. Please see http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.2.4.h tml for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

openSUSE Security Update : openSUSE-2014- (openSUSE-2014--1)

apache2-modwsgi was updated to fix a small of-by-one error in its use of setgroups. Please see http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.2.4.h tml for more information. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currentl...

Apache mod_wsgi < 4.2.4 Privilege Dropping Privilege Escalation

According to the web server banner, the version of modwsgi running on the remote host is prior to version 4.2.4. It is, therefore, affected by a privilege escalation vulnerability. The issue is triggered when attempting to drop group privileges and an error with 'setgid', 'setgroups', and...

Apache mod_wsgi < 3.5 Apache Process Privilege Escalation

According to the web server banner, the version of modwsgi running on the remote host is prior to version 3.5. It is, therefore, affected by a privilege escalation vulnerability. The issue occurs due to the improper handling of error codes returned by 'setuid'. This flaw allows local attackers to...

Apache mod_wsgi < 3.4 Remote Information Disclosure

According to the web server banner, the version of modwsgi running on the remote host is prior to version 3.4. It is, therefore, affected by a remote information disclosure vulnerability. The issue is due to the handling of corrupted 'Response Content-Type' headers. A remote attacker could...

Mandriva Linux Security Advisory : apache-mod_wsgi (MDVSA-2014:137)

Multiple vulnerabilities has been discovered and corrected in apache-modwsgi : It was found that modwsgi did not properly drop privileges if the call to setuid\ failed. If modwsgi was set up to allow unprivileged users to run WSGI applications, a local user able to run a WSGI application could...

Important: mod24_wsgi

Issue Overview: It was found that modwsgi did not properly drop privileges if the call to setuid failed. If modwsgi was set up to allow unprivileged users to run WSGI applications, a local user able to run a WSGI application could possibly use this flaw to escalate their privileges on the system...

Important: mod_wsgi

Issue Overview: It was found that modwsgi did not properly drop privileges if the call to setuid failed. If modwsgi was set up to allow unprivileged users to run WSGI applications, a local user able to run a WSGI application could possibly use this flaw to escalate their privileges on the system...

MoinMoin twikidraw Action Traversal File Upload

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

CentOS Update for mod_wsgi CESA-2014:0788 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...