Home > Vulnerability Database > CVE-2004-2680

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2004-2680

Date: March 4, 2007

mod_python (libapache2-mod-python) 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to return portions of previously freed memory.

Severity Score

5.3

Related Resources (16)

Url: http://www.securityfocus.com/archive/1/462185/100/0/threaded

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/14751

Url: http://www.ubuntu.com/usn/usn-430-1

Url: https://issues.rpath.com/browse/RPL-1105

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2004-2680

Url: http://www.securityfocus.com/bid/22849

Url: http://svn.apache.org/viewvc/httpd/mod_python/trunk/src/filterobject.c?r1=102649&r2=103561&pathrev=103561

Url: http://secunia.com/advisories/24424

Url: http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3c6DCA8C14-8FFA-11D8-8B4E-000A95B0D772%40pixar.com%3e

Url: http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cCD485B27-8F3E-11D8-934B-000A95B0D772%40pixar.com%3e

Url: http://www.vupen.com/english/advisories/2007/0846

Url: https://nvd.nist.gov/vuln/detail/CVE-2004-2680

Url: http://secunia.com/advisories/24418

Url: http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cEB279100-9000-11D8-8B4E-000A95B0D772%40pixar.com%3e

Url: https://launchpad.net/bugs/89308

Url: https://www.mend.io/vulnerability-database/CVE-2004-2680

Severity Score

5.3

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us