{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "versions mod_python 3.x. ant\u00e9rieures \u00e0 la version 3.0.4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apache",
          "scada": false
        }
      }
    },
    {
      "description": "Versions mod_python 2.7.x ant\u00e9rieures \u00e0 la version 2.7.10 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apache",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nLe module mod_python est charg\u00e9 d\u0027interpr\u00e9ter les programmes en langage\npython pour le serveur HTTP Apache.\n\nUne vuln\u00e9rabilit\u00e9 sur ce module peut permettre \u00e0 un utilisateur mal\nintentionn\u00e9, via l\u0027envoi d\u0027une requ\u00eate malicieusement construite, de\nr\u00e9aliser un d\u00e9ni de service du serveur HTTP vuln\u00e9rable.\n\n## Solution\n\nAppliquer le correctif (cf. section documentation).  \nLes versions 3.0.4 et 2.7.10 corrigent cette vuln\u00e9rabilit\u00e9.\n",
  "cves": [],
  "links": [
    {
      "title": "Avis de s\u00e9curit\u00e9 FreeBSD du 3 mars 2004 :",
      "url": "http://www.vuxml.org/freebsd/"
    },
    {
      "title": "Avis de s\u00e9curit\u00e9 Debian :",
      "url": "http://www.debian.org/security/2004/dsa-452"
    },
    {
      "title": "Avis de s\u00e9curit\u00e9 Secunia :",
      "url": "http://secunia.com/advisories/10325"
    },
    {
      "title": "Message sur la liste de diffusion mod_python :",
      "url": "http://www.modpython.org/pipermail/mod_python/2003-November/014532.html"
    },
    {
      "title": "Correctif disponible \u00e0 l\u0027adresse suivante :",
      "url": "http://httpd.apache.org/modules/python-download.cgi"
    },
    {
      "title": "Avis de s\u00e9curit\u00e9 Redhat :",
      "url": "http://rhn.redhat.com/errata/RHSA-2004-063.html"
    }
  ],
  "reference": "CERTA-2004-AVI-050",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-02-27T00:00:00.000000"
    },
    {
      "description": "ajout du bulletin de s\u00e9curit\u00e9 Debian.",
      "revision_date": "2004-03-01T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 FreeBSD.",
      "revision_date": "2004-05-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans le module mod_python qui permet \u00e0 un\nutilisateur mal intentionn\u00e9 de r\u00e9aliser un d\u00e9ni de service du serveur\nHTTP vuln\u00e9rable.\n",
  "title": "Vuln\u00e9rabilit\u00e9 sur le module mod_python du serveur HTTP Apache",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Liste de diffusion mod_python",
      "url": null
    }
  ]
}