NVD

Id
35591  
Name
CVE-2014-8583  
Description
mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-12-16  
Modified Date
2016-12-30  
Seq
2014-8583  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182201 35591 CVE-2014-8583 http://advisories.mageia.org/MGASA-2014-0513.html  View
182202 35591 CVE-2014-8583 openSUSE-SU-2014:1590  View
182203 35591 CVE-2014-8583 http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.2.4.html  View
182204 35591 CVE-2014-8583 MDVSA-2014:253  View
182205 35591 CVE-2014-8583 [oss-security] 20140619 CVE request: mod_wsgi group privilege dropping [was Re: Security release for mod_wsgi (version 3.5)]  View
182206 35591 CVE-2014-8583 [oss-security] 20141104 Re: CVE request: mod_wsgi group privilege dropping [was Re: Security release for mod_wsgi (version 3.5)]  View
182207 35591 CVE-2014-8583 68111  View
182208 35591 CVE-2014-8583 USN-2431-1  View
182209 35591 CVE-2014-8583 https://bugzilla.redhat.com/show_bug.cgi?id=1111034  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18372 JVNDB-2014-007247 Apache 用の mod_wsgi モジュールにおける権限を取得される脆弱性 Apache 用の mod_wsgi モジュールは、デーモンプロセスグループを作成する際、グループの権限をドロップできない場合に適切に処理しないため、権限を取得される脆弱性が存在します。 CVE-2014-8583 75876 CVE-2014-8583 35591 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007247.html 2014-06-19 2015-05-12 View