RHEL 2.1 / 3 : mod_python (RHSA-2004:058)

medium Nessus Plugin ID 12464

Synopsis

The remote Red Hat host is missing a security update.

Description

Updated mod_python packages that fix a denial of service vulnerability are now available for Red Hat Enterprise Linux.

mod_python embeds the Python language interpreter within the Apache httpd server.

A bug has been found in mod_python versions 2.7.10 and earlier that can lead to a denial of service vulnerability. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2003-0973 to this issue.

Although Red Hat Enterprise Linux shipped with a version of mod_python that contains this bug, our testing was unable to trigger the denial of service vulnerability. However, mod_python users are advised to upgrade to these errata packages, which contain a backported patch that corrects this bug.

Solution

Update the affected mod_python package.

Plugin Details

Severity: Medium

ID: 12464

File Name: redhat-RHSA-2004-058.nasl

Version: 1.25

Type: local

Agent: unix

Family: Red Hat Local Security Checks

Published: 7/6/2004

Updated: 1/14/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/o:redhat:enterprise_linux:2.1, cpe:/o:redhat:enterprise_linux:3, p-cpe:/a:redhat:enterprise_linux:mod_python

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 2/26/2004

Vulnerability Publication Date: 12/15/2003

Reference Information

CVE: CVE-2003-0973, CVE-2004-0096

RHSA: 2004:058

Detections

Analytics