Test ID:	1.3.6.1.4.1.25623.1.0.51614
Category:	Ubuntu Local Security Checks
Title:	Ubuntu 4.10 USN-80-1 (libapache2-mod-python)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to libapache2-mod-python announced via advisory USN-80-1. Graham Dumpleton discovered an information disclosure in the publisher handle of mod_python. By requesting a carefully crafted URL for a published module page, anybody can obtain extra information about internal variables, objects, and other information which is not intended to be visible. The following packages are affected: libapache2-mod-python2.2 libapache2-mod-python2.3 Solution: The problem can be corrected by upgrading the affected package to version 3.1.3-1ubuntu3.2. After a standard system upgrade you need to restart the Apache 2 web server using sudo /etc/init.d/apache2 restart to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-80-1 Risk factor : High CVSS Score: 7.5
Cross-Ref:	BugTraq ID: 12519 Common Vulnerability Exposure (CVE) ID: CVE-2005-0088 http://www.securityfocus.com/bid/12519 Bugtraq: 20050211 [USN-80-1] mod_python vulnerability (Google Search) http://marc.info/?l=bugtraq&m=110815313218389&w=2 CERT/CC vulnerability note: VU#356409 http://www.kb.cert.org/vuls/id/356409 Conectiva Linux advisory: CLA-2005:926 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926 Debian Security Information: DSA-689 (Google Search) http://www.debian.org/security/2005/dsa-689 http://www.securityfocus.com/archive/1/430286/100/0/threaded http://security.gentoo.org/glsa/glsa-200502-14.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10617 http://www.redhat.com/support/errata/RHSA-2005-100.html http://www.redhat.com/support/errata/RHSA-2005-104.html http://securitytracker.com/id?1013156 http://www.trustix.org/errata/2005/0003/
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.