Nessus Plugin #10947

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

mod_python handle abuse

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2002 Thomas Reinke

Summary:

Checks for version of Python

Version:

$Revision: 1.10 $

Cve_id:

CVE-2002-0185

Bugtraq_id:

4656

Xrefs:

-

Description:

The remote host is using the Apache mod_python module which
is version 2.7.6 or older.

These versions allow a module which is indirectly imported
by a published module to then be accessed via the publisher,
which allows remote attackers to call possibly
dangerous functions from the imported module.

Solution : Upgrade to a newer version.
Risk factor : High