[ GLSA 200502-14 ] mod_python: Publisher Handler vulnerability

[GLSA]

Gentoo Linux Security Advisory

Title: mod_python: Publisher Handler vulnerability (GLSA 200502-14)
Severity: low
Exploitable: remote
Date: February 13, 2005
Updated: December 30, 2007
Bug(s): #80109
ID: 200502-14

Synopsis

mod_python contains a vulnerability in the Publisher Handler potentially leading to information disclosure.

Background

mod_python is an Apache module that embeds the Python interpreter within the server allowing Python-based web-applications to be created.

Affected Packages

Package: www-apache/mod_python
Vulnerable: < 3.1.3-r1
Unaffected: >= 3.1.3-r1
Unaffected: >= 2.7.11 < 2.7.12
Architectures: All supported architectures


Description

Graham Dumpleton discovered a vulnerability in mod_python's Publisher Handler.

Impact

By requesting a specially crafted URL for a published module page, an attacker could obtain information about restricted variables.

Workaround

There is no known workaround at this time.

Resolution

All mod_python users should upgrade to the latest version: