CVE-2002-0185 mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions...
HighCVSS 7.5
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache mod python | <= 2.7.6 | No fix listed |
References
- CLA-2002:477 vendor-advisory
- modpython-imported-module-access(8997) vdb-entry
- www.modpython.org vendor-advisory
- www.modpython.org vendor-advisory
- RHSA-2002:070 vendor-advisory
- 4656 vdb-entry