Ubuntu Security Notice (C) 2012-2013 Canonical, Inc. / NASL script (C) 2012-2013 Tenable Network Security, Inc.
The remote Ubuntu host is missing a security-related patch.
James Kettle discovered Django did not properly filter the Host HTTP
header when processing certain requests. An attacker could exploit
this to generate and display arbitrary URLs to users.
Update the affected python-django package.
Risk factor :
Medium / CVSS Base Score : 6.4
CVSS Temporal Score : 5.3
Public Exploit Available : true