The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.

This update fixes an information leak in mod_python when using the publisher handle. Due to the bug it is possible to get access to published objects remotely without permission. (CVE-2005-0088)

Graham Dumpleton discovered an information disclosure in the 'publisher' handle of mod_python. By requesting a carefully crafted URL for a published module page, anybody can obtain extra information about internal variables, objects, and other information which is not intended to be visible.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Mark J Cox reports :

Graham Dumpleton discovered a flaw which can affect anyone using the publisher handle of the Apache Software Foundation mod_python. The publisher handle lets you publish objects inside modules to make them callable via URL. The flaw allows a carefully crafted URL to obtain extra information that should not be visible (information leak).

Graham Dumpleton discovered a flaw which can affect anyone using the publisher handle of the Apache Software Foundation's mod_python. The publisher handle lets you publish objects inside modules to make them callable via URL. The flaw allows a carefully crafted URL to obtain extra information that should not be visible (information leak).

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:100 advisory.

  - security flaw (CVE-2005-0088)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-200502-14 (mod_python: Publisher Handler vulnerability)

    Graham Dumpleton discovered a vulnerability in mod_python's Publisher     Handler.
  Impact :

    By requesting a specially crafted URL for a published module page, an     attacker could obtain information about restricted variables.
  Workaround :

    There is no known workaround at this time.

The remote Apache server is running a version of mod_python that is older than 3.1.4.   This version contains a flaw wherein specially formatted requests can cause mod_python to divulge information regarding paths, file locations, and more.  An attacker can use this flaw in order to gain more information about the machine.

Graham Dumpleton discovered a flaw affecting the publisher handler of mod_python, used to make objects inside modules callable via URL. A remote user could visit a carefully crafted URL that would gain access to objects that should not be visible, leading to an information leak.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0088 to this issue.

This update includes a patch which fixes this issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An Updated mod_python package that fixes a security issue in the publisher handler is now available.

Mod_python is a module that embeds the Python language interpreter within the Apache web server, allowing handlers to be written in Python.

Graham Dumpleton discovered a flaw affecting the publisher handler of mod_python, used to make objects inside modules callable via URL. A remote user could visit a carefully crafted URL that would gain access to objects that should not be visible, leading to an information leak.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-0088 to this issue.

Users of mod_python are advised to upgrade to this updated package, which contains a backported patch to correct this issue.

ID	Name	Product	Family	Severity
41349	SuSE9 Security Update : mod_python (YOU Patch Number 9905)	Nessus	SuSE Local Security Checks	high
20704	Ubuntu 4.10 : libapache2-mod-python vulnerabilities (USN-80-1)	Nessus	Ubuntu Local Security Checks	high
18932	FreeBSD : mod_python -- information leakage vulnerability (5192e7ca-7d4f-11d9-a9e7-0001020eed82)	Nessus	FreeBSD Local Security Checks	high
17197	Debian DSA-689-1 : libapache-mod-python - missing input sanitizing	Nessus	Debian Local Security Checks	high
17186	RHEL 4 : mod_python (RHSA-2005:100)	Nessus	Red Hat Local Security Checks	critical
16451	GLSA-200502-14 : mod_python: Publisher Handler vulnerability	Nessus	Gentoo Local Security Checks	high
2608	Apache mod_python < 3.1.4 Information Disclosure	Nessus Network Monitor	Web Servers	medium
16374	Fedora Core 3 : mod_python-3.1.3-5.2 (2005-140)	Nessus	Fedora Local Security Checks	high
16373	Fedora Core 2 : mod_python-3.1.3-1.fc2.2 (2005-139)	Nessus	Fedora Local Security Checks	high
16367	RHEL 2.1 / 3 : mod_python (RHSA-2005:104)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2005-0088

critical

Tenable Plugins

high

high

high

high

critical

high

medium

high

high

high