Test ID:	1.3.6.1.4.1.25623.1.0.10947
Category:	Web Servers
Title:	Apache mod_python Handle Abuse Vulnerability
Summary:	Apache mod_python is prone to a handle abuse vulnerability.
Description:	Summary: Apache mod_python is prone to a handle abuse vulnerability. Vulnerability Insight: Apache mod_python allows a module which is indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module. Affected Software/OS: Apache mod_python version 2.7.6 and prior. Solution: Update to a newer version. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0185 BugTraq ID: 4656 http://www.securityfocus.com/bid/4656 Conectiva Linux advisory: CLA-2002:477 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000477 http://www.modpython.org/pipermail/mod_python/2002-April/001991.html http://www.modpython.org/pipermail/mod_python/2002-April/002003.html http://www.redhat.com/support/errata/RHSA-2002-070.html http://www.iss.net/security_center/static/8997.php
Copyright	Copyright (C) 2002 Thomas Reinke

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.