The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
| Software | From | Fixed in |
|---|---|---|
| apache / mod_python | 2.1 | 2.1.x |
| apache / mod_python | 2.7.3 | 2.7.3.x |
| apache / mod_python | 2.7.4 | 2.7.4.x |
| apache / mod_python | 2.2 | 2.2.x |
| apache / mod_python | - | 2.7.8.x |
| apache / mod_python | 2.7.6 | 2.7.6.x |
| apache / mod_python | 2.4 | 2.4.x |
| apache / mod_python | 2.4.1 | 2.4.1.x |
| apache / mod_python | 2.0 | 2.0.x |
| apache / mod_python | 2.6.3 | 2.6.3.x |
| apache / mod_python | 2.7.1 | 2.7.1.x |
| apache / mod_python | 2.6.2 | 2.6.2.x |
| apache / mod_python | 2.7.2 | 2.7.2.x |
| apache / mod_python | 2.7 | 2.7.x |
| apache / mod_python | 1.9a | 1.9a.x |
| apache / mod_python | 2.7.5 | 2.7.5.x |
| apache / mod_python | 2.6.1 | 2.6.1.x |
| apache / mod_python | 2.6.4 | 2.6.4.x |
| apache / mod_python | 2.5 | 2.5.x |
| apache / mod_python | 2.7.7 | 2.7.7.x |
| apache / mod_python | 2.3 | 2.3.x |
| apache / mod_python | 2.6 | 2.6.x |