3 matches found
CVE-2005-0088
CVE-2005-0088 affects mod_python 2.7.8 and earlier, where the publisher handler permits remote attackers to obtain access to restricted objects via a crafted URL. The CVSS v2 base metrics show a Network attack vector, Low attack complexity, No authentication, and a Partial impact on confidentiali...
CVE-2002-0185
The CVE-2002-0185 issue affects Apache mod_python versions 2.7.6 and earlier, where a module indirectly imported by a published module can be accessed via the publisher, allowing remote attackers to call potentially dangerous functions from the imported module. The OpenVAS/NVD/CVE listings corrob...
CVE-2006-1095
The CVE-2006-1095 entry applies to Apache’s mod_python (FileSession object) and 3.2.7, where a directory traversal via a crafted session cookie can allow local code execution. Affected component: mod_python 3.2.7 for Apache (FileSession). Root cause: directory traversal in session handling. Impac...