Executive Summary

Informations
Name CVE-2003-0973 First vendor Publication 2003-12-15
Vendor Cve Last vendor Modification 2024-11-20

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score 5 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0973

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10259
 
Oval ID: oval:org.mitre.oval:def:10259
Title: Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.
Description: Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.
Family: unix Class: vulnerability
Reference(s): CVE-2003-0973
Version: 5
Platform(s): Red Hat Enterprise Linux 3
CentOS Linux 3
Product(s):
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:828
 
Oval ID: oval:org.mitre.oval:def:828
Title: mod_python Web Server Denial of Service
Description: Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.
Family: unix Class: vulnerability
Reference(s): CVE-2003-0973
Version: 4
Platform(s): Red Hat Linux 9
Product(s): mod_python
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:839
 
Oval ID: oval:org.mitre.oval:def:839
Title: mod_python Web Server Denial of Service
Description: Unknown vulnerability in mod_python 3.0.x before 3.0.4, and 2.7.x before 2.7.9, allows remote attackers to cause a denial of service (httpd crash) via a certain query string.
Family: unix Class: vulnerability
Reference(s): CVE-2003-0973
Version: 3
Platform(s): Red Hat Linux 9
Product(s): mod_python
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 13

OpenVAS Exploits

Date Description
2008-09-04 Name : FreeBSD Ports: mod_python
File : nvt/freebsd_mod_python0.nasl
2008-01-17 Name : Debian Security Advisory DSA 452-1 (libapache-mod-python)
File : nvt/deb_452_1.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
6882 Apache mod_python Malformed Query String Variant DoS

2885 Apache mod_python Malformed Query String DoS

Apache HTTP module Mod_python contains a flaw that may allow a remote denial of service. The issue is triggered when an unknown condition occurs, and will result in loss of availability for the HTTP service.

Nessus® Vulnerability Scanner

Date Description
2009-04-23 Name : The remote FreeBSD host is missing one or more security-related updates.
File : freebsd_pkg_1a448eb7698811d8873f0020ed76ef5a.nasl - Type : ACT_GATHER_INFO
2004-09-29 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-452.nasl - Type : ACT_GATHER_INFO
2004-07-06 Name : The remote Red Hat host is missing a security update.
File : redhat-RHSA-2004-058.nasl - Type : ACT_GATHER_INFO
2003-12-04 Name : The remote web server is prone to a denial of service attack.
File : mod_python_malformed_query.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://bugzilla.fedora.us/show_bug.cgi?id=1325
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000837
http://www.debian.org/security/2004/dsa-452
http://www.modpython.org/pipermail/mod_python/2003-November/004005.html
http://www.redhat.com/support/errata/RHSA-2004-058.html
http://www.redhat.com/support/errata/RHSA-2004-063.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
Date Informations
2024-11-28 23:23:19
  • Multiple Updates
2024-11-28 12:05:47
  • Multiple Updates
2021-05-04 12:02:10
  • Multiple Updates
2021-04-22 01:02:17
  • Multiple Updates
2020-05-23 00:15:32
  • Multiple Updates
2017-10-11 09:23:19
  • Multiple Updates
2016-04-26 12:38:57
  • Multiple Updates
2014-02-17 10:26:44
  • Multiple Updates
2013-09-04 13:23:01
  • Multiple Updates
2013-05-11 11:53:20
  • Multiple Updates