CVE-2004-2680

概要

参考情報

• mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3c6DCA8C14-8FFA-11D8-8B4E-000A95B0D772%40pixar.com%3e
• mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cCD485B27-8F3E-11D8-934B-000A95B0D772%40pixar.com%3e
• mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cEB279100-9000-11D8-8B4E-000A95B0D772%40pixar.com%3e
• secunia.com/advisories/24418
• secunia.com/advisories/24424
• svn.apache.org/viewvc/httpd/mod_python/trunk/src/filterobject.c
• securityfocus.com/archive/1/462185/100/0/threaded
• securityfocus.com/bid/22849
• ubuntu.com/usn/usn-430-1
• vupen.com/english/advisories/2007/0846
• exchange.xforce.ibmcloud.com/vulnerabilities/14751
• issues.rpath.com/browse/RPL-1105
• launchpad.net/bugs/89308 · Patch

mod python のその他の脆弱性

• CVE-2006-1095高 7.2Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to execute arbitrary co…
• CVE-2005-0088高 7.5The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
• CVE-2004-0096中 5.0Unknown vulnerability in mod_python 2.7.9 allows remote attackers to cause a denial of service (httpd crash) via a certain query string, a v…
• CVE-2003-0973中 5.0Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd …
• CVE-2002-0185高 7.5mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which …