CVE-2005-0088
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access...
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
Exploit likelihood
What each source reports
NVD Score used
7.5
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
- Record
CVE-2005-0088- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
- Record
CVE-2005-0088- Updated
- 2026-11-02
EUVDEUVD-2005-0089 No score
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
- Record
EUVD-2005-0089- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4xhm-pcpf-389c No score
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access...
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
- Record
GHSA-4xhm-pcpf-389c- Updated
- 2026-11-02
OSV No score
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
- Record
CVE-2005-0088- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0088 No score
The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.
- Record
DEBIAN-CVE-2005-0088- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libapache2-mod-pythonDebian:12 |
before 3.1.3-3 | 3.1.3-3 |
libapache2-mod-pythonDebian:14 |
before 3.1.3-3 | 3.1.3-3 |
libapache-mod-pythonDebian:3.0 |
before 2:2.7.8-0.0woody5, plus listed versions 2:2.7.8-0.0woody2 |
2:2.7.8-0.0woody5 |
mod_pythonRed Hat:enterprise_linux:4::as |
before 0:3.1.3-5.1 | 0:3.1.3-5.1 |
mod_python-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.1.3-5.1 | 0:3.1.3-5.1 |
mod_pythonRed Hat:enterprise_linux:4::desktop |
before 0:3.1.3-5.1 | 0:3.1.3-5.1 |
mod_python-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.1.3-5.1 | 0:3.1.3-5.1 |
mod_pythonRed Hat:enterprise_linux:4::es |
before 0:3.1.3-5.1 | 0:3.1.3-5.1 |
mod_python-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.1.3-5.1 | 0:3.1.3-5.1 |
mod_pythonRed Hat:enterprise_linux:4::ws |
before 0:3.1.3-5.1 | 0:3.1.3-5.1 |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mod_python-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.1.3-5.1 | 0:3.1.3-5.1 |
mod_pythonRed Hat:enterprise_linux:3::as |
before 0:3.0.3-5.ent | 0:3.0.3-5.ent |
mod_python-debuginfoRed Hat:enterprise_linux:3::as |
before 0:3.0.3-5.ent | 0:3.0.3-5.ent |
mod_pythonRed Hat:enterprise_linux:3::desktop |
before 0:3.0.3-5.ent | 0:3.0.3-5.ent |
mod_python-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:3.0.3-5.ent | 0:3.0.3-5.ent |
mod_pythonRed Hat:enterprise_linux:3::es |
before 0:3.0.3-5.ent | 0:3.0.3-5.ent |
mod_python-debuginfoRed Hat:enterprise_linux:3::es |
before 0:3.0.3-5.ent | 0:3.0.3-5.ent |
mod_pythonRed Hat:enterprise_linux:3::ws |
before 0:3.0.3-5.ent | 0:3.0.3-5.ent |
mod_python-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:3.0.3-5.ent | 0:3.0.3-5.ent |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0088 is a high vulnerability (CVSS 7.5) in Apache Mod Python, published February 10, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.46%, the 93rd percentile. Fixed in libapache2-mod-python 3.1.3-3.
References
redhat.com/support/errata/RHSA-2005-104.html
security.gentoo.org/glsa/glsa-200502-14.xml
trustix.org/errata/2005/0003
securityfocus.com/archive/1/430286/100/0/threaded
securitytracker.com/id?1013156
marc.info?l=bugtraq&m=110815313218389&w=2
Show 19 moreShow less
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000926
securityfocus.com/bid/12519
debian.org/security/2005/dsa-689
redhat.com/support/errata/RHSA-2005-100.html
kb.cert.org/vuls/id/356409
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10617
nvd.nist.gov/vuln/detail/CVE-2005-0088
github.com/advisories/GHSA-4xhm-pcpf-389c
security-tracker.debian.org/tracker/CVE-2005-0088
access.redhat.com/errata/RHSA-2005:100
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=146657
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_100.json
access.redhat.com/security/cve/CVE-2005-0088
bugzilla.redhat.com/show_bug.cgi?id=1617450
cve.org/CVERecord?id=CVE-2005-0088
access.redhat.com/errata/RHSA-2005:104
bugzilla.redhat.com/show_bug.cgi?id=146655
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_104.json