mod_python: denial of service vulnerability [LWN.net]

Package(s):

mod_python

CVE #(s):

CAN-2003-0973

Created:

January 27, 2004

Updated:

October 4, 2004

Description:

Apache's mod_python module could crash the httpd process if a specific, malformed query string was sent.

The Apache Foundation has reported that mod_python may be prone to Denial of Service attacks when handling a malformed query. Mod_python 2.7.9 was released to fix the vulnerability, however, because the vulnerability has not been fully fixed, version 2.7.10 has been released.

Users of mod_python 3.0.4 are not affected by this vulnerability.

Alerts:

Fedora-Legacy	FLSA:1325	2004-10-03
Conectiva	CLA-2004:837	2004-04-12
Whitebox	WBSA-2004:058-01	2004-03-01
Debian	DSA-452-1	2004-02-29
Red Hat	RHSA-2004:058-01	2004-02-26
Red Hat	RHSA-2004:063-01	2004-02-26
Gentoo	200401-03	2004-01-27

(Log in to post comments)