CVE-2004-2680

Description (CNA)

mod_python (libapache2-mod-python) 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to return portions of previously freed memory.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://secunia.com/advisories/24424
• http://www.ubuntu.com/usn/usn-430-1
• http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cEB279100-9000-11D8-8B4E-000A95B0D772%40pixar.com%3e
• http://www.securityfocus.com/archive/1/462185/100/0/threaded
• http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3c6DCA8C14-8FFA-11D8-8B4E-000A95B0D772%40pixar.com%3e
• http://www.vupen.com/english/advisories/2007/0846
• http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cCD485B27-8F3E-11D8-934B-000A95B0D772%40pixar.com%3e
• https://launchpad.net/bugs/89308
• http://svn.apache.org/viewvc/httpd/mod_python/trunk/src/filterobject.c?r1=102649&r2=103561&pathrev=103561
• https://issues.rpath.com/browse/RPL-1105
• http://secunia.com/advisories/24418
• http://www.securityfocus.com/bid/22849
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14751

ADP enrichment