CVE-2014-0242

概要

参考情報

• blog.dscpl.com.au/2014/05/security-release-for-modwsgi-version-35.html · Release Notes
• modwsgi.readthedocs.org/en/latest/release-notes/version-3.4.html · Release Notes
• openwall.com/lists/oss-security/2014/05/21/1 · Mailing List
• securityfocus.com/bid/67534 · Third Party Advisory

mod wsgi のその他の脆弱性

• CVE-2022-2255高 7.5A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to…
• CVE-2014-8583中 6.9mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, wh…
• CVE-2014-0240中 6.2The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on …