Description
mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module.
References
- modpython-imported-module-access(8997) vdb-entry
- 4656 vdb-entry
- http://www.modpython.org/pipermail/mod_python/2002-April/002003.html
- http://www.modpython.org/pipermail/mod_python/2002-April/001991.html
- RHSA-2002:070 vendor-advisory
- CLA-2002:477 vendor-advisory