It was found that mod_wsgi did not properly drop privileges if the call to setuid() failed. If mod_wsgi was set up to allow unprivileged users to run WSGI applications, a local user able to run a WSGI application could possibly use this flaw to escalate their privileges on the system. Note: mod_wsgi is not intended to provide privilege separation for WSGI applications. Systems relying on mod_wsgi to limit or sandbox the privileges of mod_wsgi applications should migrate to a different solution with proper privilege separation.

mod_wsgi allows you to host Python applications on the Apache HTTP Server. It was found that a remote attacker could leak portions of a mod_wsgi application's memory via the Content-Type header.

An updated mod_wsgi package that fixes two security issues is now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The mod_wsgi adapter is an Apache module that provides a WSGI-compliant interface for hosting Python-based web applications within Apache.

It was found that mod_wsgi did not properly drop privileges if the call to setuid() failed. If mod_wsgi was set up to allow unprivileged users to run WSGI applications, a local user able to run a WSGI application could possibly use this flaw to escalate their privileges on the system. (CVE-2014-0240)

Note: mod_wsgi is not intended to provide privilege separation for WSGI applications. Systems relying on mod_wsgi to limit or sandbox the privileges of mod_wsgi applications should migrate to a different solution with proper privilege separation.

It was discovered that mod_wsgi could leak memory of a hosted web application via the 'Content-Type' header. A remote attacker could possibly use this flaw to disclose limited portions of the web application's memory. (CVE-2014-0242)

Red Hat would like to thank Graham Dumpleton for reporting these issues. Upstream acknowledges Robert Kisteleki as the original reporter of CVE-2014-0240, and Buck Golemon as the original reporter of CVE-2014-0242.

All mod_wsgi users are advised to upgrade to this updated package, which contains backported patches to correct these issues.

According to the web server banner, the version of mod_wsgi running on the remote host is prior to version 3.4. It is, therefore, affected by a remote information disclosure vulnerability.

The issue is due to the handling of corrupted 'Response Content-Type' headers. A remote attacker could potentially access sensitive information in memory chunks.

Multiple vulnerabilities has been discovered and corrected in apache-mod_wsgi :

It was found that mod_wsgi did not properly drop privileges if the call to setuid\(\) failed. If mod_wsgi was set up to allow unprivileged users to run WSGI applications, a local user able to run a WSGI application could possibly use this flaw to escalate their privileges on the system (CVE-2014-0240).

It was discovered that mod_wsgi could leak memory of a hosted web application via the Content-Type header. A remote attacker could possibly use this flaw to disclose limited portions of the web application's memory (CVE-2014-0242).

The updated packages have been patched to correct these issues.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2222-1 advisory.

    Rbert Kisteleki discovered mod_wsgi incorrectly checked setuid return values. A malicious application     could use this issue to cause a local privilege escalation when using daemon mode. (CVE-2014-0240)

    Buck Golemon discovered that mod_wsgi used memory that had been freed. A remote attacker could use this     issue to read process memory via the Content-Type response header. This issue only affected Ubuntu 12.04     LTS. (CVE-2014-0242)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-0788 advisory.

    - fix for CVE-2014-0242 (#1104685)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2014-409:01 advisory.

    The mod_wsgi adapter is an Apache module that provides a WSGI compliant     interface for hosting Python based web applications within Apache. The     adapter is written completely in C code against the Apache C runtime and     for hosting WSGI applications within Apache has a lower overhead than using     existing WSGI adapters for mod_python or CGI.
    Security issues fixed with this release:
    CVE-2014-0240     The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error     codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges     via vectors related to the number of running processes.
    CVE-2014-0242
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when     announcing a new security problem. When the candidate has been publicized, the details for this candidate     will be provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It was found that mod_wsgi did not properly drop privileges if the call to setuid() failed. If mod_wsgi was set up to allow unprivileged users to run WSGI applications, a local user able to run a WSGI application could possibly use this flaw to escalate their privileges on the system. (CVE-2014-0240)

Note: mod_wsgi is not intended to provide privilege separation for WSGI applications. Systems relying on mod_wsgi to limit or sandbox the privileges of mod_wsgi applications should migrate to a different solution with proper privilege separation.

It was discovered that mod_wsgi could leak memory of a hosted web application via the 'Content-Type' header. A remote attacker could possibly use this flaw to disclose limited portions of the web application's memory. (CVE-2014-0242)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
78318	Amazon Linux AMI : mod24_wsgi (ALAS-2014-375)	Nessus	Amazon Linux Local Security Checks	2014/10/12	2019/12/18	high
76243	RHEL 6 : mod_wsgi (RHSA-2014:0788)	Nessus	Red Hat Local Security Checks	2014/6/26	2021/1/14	high
76496	Apache mod_wsgi < 3.4 Remote Information Disclosure	Nessus	CGI abuses	2014/7/14	2026/1/22	medium
76217	CentOS 6 : mod_wsgi (CESA-2014:0788)	Nessus	CentOS Local Security Checks	2014/6/26	2021/1/4	high
76481	Mandriva Linux Security Advisory : apache-mod_wsgi (MDVSA-2014:137)	Nessus	Mandriva Local Security Checks	2014/7/13	2021/1/6	medium
74185	Ubuntu 14.04 LTS : mod_wsgi vulnerabilities (USN-2222-1)	Nessus	Ubuntu Local Security Checks	2014/5/27	2025/9/3	high
76231	Oracle Linux 6 : mod_wsgi (ELSA-2014-0788)	Nessus	Oracle Linux Local Security Checks	2014/6/26	2024/10/22	high
291475	MiracleLinux 4 : mod_wsgi-3.2-6.AXS4 (AXSA:2014-409:01)	Nessus	Miracle Linux Local Security Checks	2026/1/19	2026/1/19	high
76246	Scientific Linux Security Update : mod_wsgi on SL6.x i386/srpm/x86_64 (20140625)	Nessus	Scientific Linux Local Security Checks	2014/6/26	2021/1/14	high
78319	Amazon Linux AMI : mod_wsgi (ALAS-2014-376)	Nessus	Amazon Linux Local Security Checks	2014/10/12	2019/12/18	high

检测

插件搜索

high

high

medium

high

medium

high

high

high

high

high