CVE-2004-2680 mod_python (libapache2-mod-python) 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to return portions of previously freed memo...
MediumCVSS 5.0
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
mod_python (libapache2-mod-python) 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to return portions of previously freed memory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache mod python | <= 3.1.4 | No fix listed |
| debian/libapache2-mod-python(Debian:12) | < 3.2.8-1 | 3.2.8-1 |
| debian/libapache2-mod-python(Debian:14) | < 3.2.8-1 | 3.2.8-1 |
| debian/libapache2-mod-python(Debian:14) | = 3.1.3-3 | No fix listed |
References
- [httpd-python-dev] 20040416 Re: possible bug in filter.write() mailing-list
- [httpd-python-dev] 20040416 possible bug in filter.write() mailing-list
- [httpd-python-dev] 20040416 patch for filterobject.c mailing-list
- 24418 third-party-advisory
- 24424 third-party-advisory
- svn.apache.org
- 20070307 rPSA-2007-0051-1 mod_python mailing-list
- 22849 vdb-entry
- USN-430-1 vendor-advisory
- ADV-2007-0846 vdb-entry
- modpython-outputfilter-info-disclosure(14751) vdb-entry
- issues.rpath.com
- launchpad.net patch
- Debian Security Tracker CVE-2004-2680 vendor-advisory