Published: 02/05/2005 Updated: 19/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The publisher handler for mod_python 2.7.8 and previous versions allows remote malicious users to obtain access to restricted objects via a crafted URL.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache mod python 1.9a
apache mod python 2.0
apache mod python 2.6
apache mod python 2.6.1
apache mod python 2.7.3
apache mod python 2.7.4
apache mod python 2.7.5
apache mod python 2.1
apache mod python 2.2
apache mod python 2.6.2
apache mod python 2.6.3
apache mod python 2.7.6
apache mod python 2.7.7
apache mod python 2.3
apache mod python 2.4
apache mod python 2.6.4
apache mod python 2.7
apache mod python
apache mod python 2.4.1
apache mod python 2.5
apache mod python 2.7.1
apache mod python 2.7.2

Graham Dumpleton discovered an information disclosure in the “publisher” handle of mod_python By requesting a carefully crafted URL for a published module page, anybody can obtain extra information about internal variables, objects, and other information which is not intended to be visible ...

Synopsis mod_python security update Type/Severity Security Advisory: Moderate Topic An Updated mod_python package that fixes a security issue in the publisherhandler is now available Description Mod_python is a module that embeds the Python language interpreter withinthe Apache web server, ...

Synopsis mod_python security update Type/Severity Security Advisory: Moderate Topic An updated mod_python package that fixes a security issue in the publisherhandle is now available for Red Hat Enterprise Linux 4This update has been rated as having moderate security impact by the Red HatSecurity Response T ...

Graham Dumpleton discovered a flaw which can affect anyone using the publisher handle of the Apache Software Foundation's mod_python The publisher handle lets you publish objects inside modules to make them callable via URL The flaw allows a carefully crafted URL to obtain extra information that should not be visible (information leak) For the s ...

NVD-CWE-Other http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926 http://www.debian.org/security/2005/dsa-689 http://security.gentoo.org/glsa/glsa-200502-14.xml http://www.redhat.com/support/errata/RHSA-2005-100.html http://www.redhat.com/support/errata/RHSA-2005-104.html http://www.trustix.org/errata/2005/0003/http://www.kb.cert.org/vuls/id/356409 http://www.securityfocus.com/bid/12519 http://securitytracker.com/id?1013156 http://marc.info/?l=bugtraq&m=110815313218389&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10617 http://www.securityfocus.com/archive/1/430286/100/0/threaded https://usn.ubuntu.com/80-1/https://nvd.nist.gov https://www.kb.cert.org/vuls/id/356409

CVE-2005-0088

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect