Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2004-2680
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2004-2680

Description:
mod_python (libapache2-mod-python) 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to return portions of previously freed memory.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/14751

UBUNTU
  http://www.ubuntu.com/usn/usn-430-1

SAID
  Secunia Advisory: SA24424
  Secunia Advisory: SA24418

MLIST
  http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cEB279100-9000-11D8-8B4E-000A95B0D772@pixar.com%3e
  http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3c6DCA8C14-8FFA-11D8-8B4E-000A95B0D772@pixar.com%3e
  http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cCD485B27-8F3E-11D8-934B-000A95B0D772@pixar.com%3e

CONFIRM
  http://svn.apache.org/viewvc/httpd/mod_python/trunk/src/filterobject.c?r1=102649&r2=103561&pathrev=103561

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/462185/100/0/threaded

BID
  22849


Return to the previous page.