Ubuntu Security Notice (C) 2014 Canonical, Inc. / NASL script (C) 2014 Tenable Network Security, Inc.
The remote Ubuntu host is missing one or more security-related patches.
RÃ³bert Kisteleki discovered mod_wsgi incorrectly checked setuid
return values. A malicious application could use this issue to cause a
local privilege escalation when using daemon mode. (CVE-2014-0240)
Buck Golemon discovered that mod_wsgi used memory that had been freed.
A remote attacker could use this issue to read process memory via the
Content-Type response header. This issue only affected Ubuntu 12.04
Update the affected libapache2-mod-wsgi and / or
Risk factor :
Medium / CVSS Base Score : 6.2
CVSS Temporal Score : 5.4
Public Exploit Available : true
Family: Ubuntu Local Security Checks
Nessus Plugin ID: 74185 ()
Bugtraq ID: 6753267534
CVE ID: CVE-2014-0240CVE-2014-0242
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.