Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-0240
HistoryMay 23, 2014 - 12:00 a.m.

CVE-2014-0240

2014-05-2300:00:00
ubuntu.com
ubuntu.com
9

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

JSON

The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled,
does not properly handle error codes returned by setuid when run on certain
Linux kernels, which allows local users to gain privileges via vectors
related to the number of running processes.

Bugs

Notes

Author Note
mdeslaur from upstream: The issue is believed to affect Linux systems running kernel versions >= 2.6.0 and < 3.1.0.
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchmod-wsgi< 3.3-4ubuntu0.1UNKNOWN
ubuntu13.10noarchmod-wsgi< 3.4-4ubuntu2.1.13.10.1UNKNOWN
ubuntu14.04noarchmod-wsgi< 3.4-4ubuntu2.1.14.04.1UNKNOWN

Related

nessus 18
debiancve 1
nvd 1
centos 2
cvelist 1
redhat 3
openvas 14
cve 1
oraclelinux 2
veracode 1
prion 1
amazon 2
osv 1
fedora 2
debian 1
ubuntu 1
gentoo 1
securityvulns 2
nessus
nessus
RHEL 7 : mod_wsgi (RHSA-2014:1091)
2014-08-26 00:00:00
Apache mod_wsgi < 3.5 Apache Process Privilege Escalation
2014-07-14 00:00:00
CentOS 7 : mod_wsgi (CESA-2014:1091)
2014-08-26 00:00:00
debiancve
debiancve
CVE-2014-0240
2014-05-27 15:00:00
nvd
nvd
CVE-2014-0240
2014-05-27 14:55:12
centos
centos
mod_wsgi security update
2014-08-25 12:17:55
mod_wsgi security update
2014-06-25 19:01:10
cvelist
cvelist
CVE-2014-0240
2014-05-27 15:00:00
redhat
redhat
(RHSA-2014:1091) Important: mod_wsgi security update
2014-08-25 00:00:00
(RHSA-2014:0789) Important: python27-mod_wsgi and python33-mod_wsgi security update
2014-06-25 00:00:00
(RHSA-2014:0788) Important: mod_wsgi security update
2014-06-25 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2014-1091)
2015-10-06 00:00:00
RedHat Update for mod_wsgi RHSA-2014:1091-01
2014-08-26 00:00:00
CentOS Update for mod_wsgi CESA-2014:1091 centos7
2014-09-10 00:00:00
cve
cve
CVE-2014-0240
2014-05-27 15:00:00
oraclelinux
oraclelinux
mod_wsgi security update
2014-08-25 00:00:00
mod_wsgi security update
2014-06-25 00:00:00
veracode
veracode
Privilege Escalation
2019-01-15 08:54:30
prion
prion
Code injection
2014-05-27 14:55:00
amazon
amazon
Important: mod24_wsgi
2014-07-09 23:02:00
Important: mod_wsgi
2014-07-09 23:07:00
osv
osv
mod-wsgi - security update
2014-05-27 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: mod_wsgi-3.5-1.fc20
2014-06-17 23:26:05
[SECURITY] Fedora 19 Update: mod_wsgi-3.5-1.fc19
2014-06-17 23:35:19
debian
debian
[SECURITY] [DSA 2937-1] mod-wsgi security update
2014-05-27 14:35:16
ubuntu
ubuntu
mod_wsgi vulnerabilities
2014-05-26 00:00:00
gentoo
gentoo
mod_wsgi: Privilege escalation
2014-12-13 00:00:00
securityvulns
securityvulns
mod-wsgi security vulnerabilities
2014-05-29 00:00:00
[SECURITY] [DSA 2937-1] mod-wsgi security update
2014-05-29 00:00:00

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for UB:CVE-2014-0240
nessus18debiancve1nvd1centos2cvelist1redhat3openvas14cve1oraclelinux2veracode1prion1amazon2osv1fedora2debian1ubuntu1gentoo1securityvulns2