• info
• discussion
• exploit
• solution
• references

Apache mod_python Module Publisher Handler Information Disclosure Vulnerability

Solution:
Please see the referenced vendor advisories for details on obtaining and applying fixes.


Gregory Trubetskoy mod_python 2.7.6

• RedHat mod_python-2.7.8-1.7.3.3.legacy.i386.rpm
  Red Hat Linux 7.3:
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/mod_python-2. 7.8-1.7.3.3.legacy.i386.rpm

Gregory Trubetskoy mod_python 2.7.8

• Debian libapache-mod-python_2.7.8-0.0woody5_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libapache-mod-python /libapache-mod-python_2.7.8-0.0woody5_alpha.deb


• Debian libapache-mod-python_2.7.8-0.0woody5_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libapache-mod-python /libapache-mod-python_2.7.8-0.0woody5_arm.deb


• Debian libapache-mod-python_2.7.8-0.0woody5_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libapache-mod-python /libapache-mod-python_2.7.8-0.0woody5_hppa.deb


• Debian libapache-mod-python_2.7.8-0.0woody5_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libapache-mod-python /libapache-mod-python_2.7.8-0.0woody5_i386.deb


• Debian libapache-mod-python_2.7.8-0.0woody5_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libapache-mod-python /libapache-mod-python_2.7.8-0.0woody5_ia64.deb


• Debian libapache-mod-python_2.7.8-0.0woody5_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libapache-mod-python /libapache-mod-python_2.7.8-0.0woody5_m68k.deb


• Debian libapache-mod-python_2.7.8-0.0woody5_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libapache-mod-python /libapache-mod-python_2.7.8-0.0woody5_mips.deb


• Debian libapache-mod-python_2.7.8-0.0woody5_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libapache-mod-python /libapache-mod-python_2.7.8-0.0woody5_mipsel.deb


• Debian libapache-mod-python_2.7.8-0.0woody5_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libapache-mod-python /libapache-mod-python_2.7.8-0.0woody5_powerpc.deb


• Debian libapache-mod-python_2.7.8-0.0woody5_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libapache-mod-python /libapache-mod-python_2.7.8-0.0woody5_s390.deb


• Debian libapache-mod-python_2.7.8-0.0woody5_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/liba/libapache-mod-python /libapache-mod-python_2.7.8-0.0woody5_sparc.deb

SGI ProPack 3.0

• SGI Patch10144
  http://support.sgi.com/

Gregory Trubetskoy mod_python 3.0.1

• RedHat mod_python-3.0.1-4.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/mod_python-3.0. 1-4.1.legacy.i386.rpm

Gregory Trubetskoy mod_python 3.0.3

• RedHat mod_python-3.0.4-0.1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/mod_python-3.0. 4-0.1.1.legacy.i386.rpm

Gregory Trubetskoy mod_python 3.0.4

• Conectiva mod_python-3.0.4-28605U90_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/mod_python-3.0.4-28605U90_2 cl.i386.rpm


• Conectiva mod_python-doc-3.0.4-28605U90_2cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/9/RPMS/mod_python-doc-3.0.4-28605U 90_2cl.i386.rpm

Gregory Trubetskoy mod_python 3.1.3

• Conectiva mod_python-3.1.3-51944U10_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/mod_python-3.1.3-51944U10_ 1cl.i386.rpm


• Conectiva mod_python-doc-3.1.3-51944U10_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/10/RPMS/mod_python-doc-3.1.3-51944 U10_1cl.i386.rpm


• Fedora mod_python-3.1.3-1.fc2.2.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora mod_python-3.1.3-1.fc2.2.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora mod_python-3.1.3-5.2.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora mod_python-3.1.3-5.2.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora mod_python-debuginfo-3.1.3-1.fc2.2.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora mod_python-debuginfo-3.1.3-1.fc2.2.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora mod_python-debuginfo-3.1.3-5.2.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora mod_python-debuginfo-3.1.3-5.2.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Trustix mod_python-3.1.3-2tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Ubuntu libapache2-mod-python-doc_3.1.3-1ubuntu3.2_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python /libapache2-mod-python-doc_3.1.3-1ubuntu3.2_all.deb


• Ubuntu libapache2-mod-python_3.1.3-1ubuntu3.2_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python /libapache2-mod-python_3.1.3-1ubuntu3.2_all.deb


• Ubuntu libapache2-mod-python2.2_3.1.3-1ubuntu3.2_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/liba/libapache2-mod-py thon/libapache2-mod-python2.2_3.1.3-1ubuntu3.2_amd64.deb


• Ubuntu libapache2-mod-python2.2_3.1.3-1ubuntu3.2_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/liba/libapache2-mod-py thon/libapache2-mod-python2.2_3.1.3-1ubuntu3.2_i386.deb


• Ubuntu libapache2-mod-python2.2_3.1.3-1ubuntu3.2_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/liba/libapache2-mod-py thon/libapache2-mod-python2.2_3.1.3-1ubuntu3.2_powerpc.deb


• Ubuntu libapache2-mod-python2.3_3.1.3-1ubuntu3.2_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python /libapache2-mod-python2.3_3.1.3-1ubuntu3.2_amd64.deb


• Ubuntu libapache2-mod-python2.3_3.1.3-1ubuntu3.2_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python /libapache2-mod-python2.3_3.1.3-1ubuntu3.2_i386.deb


• Ubuntu libapache2-mod-python2.3_3.1.3-1ubuntu3.2_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/liba/libapache2-mod-python /libapache2-mod-python2.3_3.1.3-1ubuntu3.2_powerpc.deb