Apache 'mod_wsgi' Module Privilege Escalation Vulnerability

Bugtraq ID:	68111
Class:	Unknown
CVE:	CVE-2014-8583
Remote:	No
Local:	Yes
Published:	Jun 17 2014 12:00AM
Updated:	Jan 12 2017 01:07AM
Credit:	Tomas Hoger
Vulnerable:	Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 GrahamDumpleton mod_wsgi 3.5 Gentoo Linux
Not Vulnerable:	GrahamDumpleton mod_wsgi 4.2.4

Apache 'mod_wsgi' Module Privilege Escalation Vulnerability

Apache 'mod_wsgi' module is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to gain elevated privileges to the application.

Versions prior to mod_wsgi 4.2.4 are vulnerable.

Apache 'mod_wsgi' Module Privilege Escalation Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

Apache 'mod_wsgi' Module Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Mandriva Business Server 1 X86 64

• Mandriva apache-mod_wsgi-3.5-1.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Apache 'mod_wsgi' Module Privilege Escalation Vulnerability

References:

• mod-wsgi Homepage (mod-wsgi)
  
• mod-wsgi Version 4.2.4 (mod-wsgi)