CVE-2005-0088
Estado: ModificadaAlta (7.5)—
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 6.46%
- Percentil entre todas las CVEs puntuadas: 94
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926
- http://marc.info/?l=bugtraq&m=110815313218389&w=2
- http://security.gentoo.org/glsa/glsa-200502-14.xml
- http://securitytracker.com/id?1013156
- http://www.debian.org/security/2005/dsa-689
- http://www.kb.cert.org/vuls/id/356409
- http://www.redhat.com/support/errata/RHSA-2005-100.html
- http://www.redhat.com/support/errata/RHSA-2005-104.html
- http://www.securityfocus.com/archive/1/430286/100/0/threaded
- http://www.securityfocus.com/bid/12519
- http://www.trustix.org/errata/2005/0003/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10617
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926
- http://marc.info/?l=bugtraq&m=110815313218389&w=2
- http://security.gentoo.org/glsa/glsa-200502-14.xml
- http://securitytracker.com/id?1013156
- http://www.debian.org/security/2005/dsa-689
- http://www.kb.cert.org/vuls/id/356409
- http://www.redhat.com/support/errata/RHSA-2005-100.html
- http://www.redhat.com/support/errata/RHSA-2005-104.html
- http://www.securityfocus.com/archive/1/430286/100/0/threaded
- http://www.securityfocus.com/bid/12519
- http://www.trustix.org/errata/2005/0003/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10617
JSON original (NVD)
Mostrar
{
"id": "CVE-2005-0088",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2005-05-02T04:00:00.000",
"references": [
{
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926",
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=110815313218389&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://security.gentoo.org/glsa/glsa-200502-14.xml",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1013156",
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2005/dsa-689",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/356409",
"tags": [
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2005-100.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2005-104.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/430286/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/12519",
"source": "cve@mitre.org"
},
{
"url": "http://www.trustix.org/errata/2005/0003/",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10617",
"source": "cve@mitre.org"
},
{
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=110815313218389&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://security.gentoo.org/glsa/glsa-200502-14.xml",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1013156",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2005/dsa-689",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/356409",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2005-100.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2005-104.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/430286/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/12519",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.trustix.org/errata/2005/0003/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10617",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL."
}
],
"lastModified": "2026-06-16T22:10:29.127",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apache:mod_python:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0359C038-B61F-4640-ADFA-7B8038DFCD9B",
"versionEndIncluding": "2.7.8"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:1.9a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5509C23E-30C8-47E5-A0D6-5DBABD357203"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "253A9B1A-5E40-4BF3-A181-DD8EC86EB119"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CD7D5B0-DB5C-4C92-B701-84274A2D8FEE"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76C96ED2-1B85-4B1F-AAAB-5FC90BF5AB7F"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "490DC20E-7A70-4095-82D2-2E8ED23C5BE8"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B27C447F-2883-464D-AC9C-22AFF1278E8F"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E83757F-81A1-48CF-93FE-3F2B8C2E9EAF"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F845DD2D-7DCB-4CB4-A70C-ABE10DC136D8"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E26E30A3-747D-491D-9930-63488AE5E768"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "899F6DBB-C557-4C43-8573-217134A1D44B"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B29FD9AA-7B11-4B7D-BA40-B7F488D83892"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC9E0311-B2B6-4770-8393-8A65CC3D5BF9"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5D35BAD-EE65-46E7-845A-DE58D8A1EFDB"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "310A5F62-EF40-462A-B1CD-251704B74C2F"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "399203BA-6661-4451-A667-1EBCC0310FA3"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9604D18-BFA4-4725-8810-8D2BAD9E0DF1"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7BA1FA8-74C2-4473-B121-C9C958547501"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "695F589B-1CEA-4974-9E47-FB7E5DF5B919"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.7.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1045B136-428A-461C-98BA-3E4C818DE27E"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.7.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2BFBBA5-750F-43B4-BE5F-BDBA2E2FDF5F"
},
{
"criteria": "cpe:2.3:a:apache:mod_python:2.7.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23C3FE2B-C056-4FE5-A8AC-A0BC9B69E454"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}