Description
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
References (12)
Core 12
Core References
Vendor Advisory vendor-advisory
x_refsource_conectiva
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-104.html
Patch vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200502-14.xml
Vendor Advisory vendor-advisory
x_refsource_trustix
http://www.trustix.org/errata/2005/0003/
Third Party Advisory, VDB Entry vendor-advisory
x_refsource_fedora
http://www.securityfocus.com/archive/1/430286/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1013156
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=110815313218389&w=2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/12519
Patch vendor-advisory
x_refsource_debian
http://www.debian.org/security/2005/dsa-689
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-100.html
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/356409
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10617
Scores
EPSS
0.0646
EPSS Percentile
93.0%
Details
Status
published
Products (22)
apache/mod_python
1.9a
apache/mod_python
2.0
apache/mod_python
2.1
apache/mod_python
2.2
apache/mod_python
2.3
apache/mod_python
2.4
apache/mod_python
2.4.1
apache/mod_python
2.5
apache/mod_python
2.6
apache/mod_python
2.6.1
... and 12 more
Published
May 02, 2005
Tracked Since
Feb 18, 2026