Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

mod_python: information disclosure

Package(s):

libapache2-mod-python

CVE #(s):

CVE-2004-2680

Created:

March 7, 2007

Updated:

March 8, 2007

Description:

From the Ubuntu advisory: Miles Egan discovered that mod_python, when used in output filter mode, did not handle output larger than 16384 bytes, and would display freed memory, possibly disclosing private data.

Alerts:

rPath	rPSA-2007-0051-1	2007-03-07
Ubuntu	USN-430-1	2007-03-06

(Log in to post comments)