CVE-2014-0240

Published: May 27, 2014Modified: May 6, 2026

6.2

Vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 1.9 / Impact: 10.0

Source: NVD

Description

The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes.

Affected (21)

Products: Modwsgi: Mod Wsgi

Modwsgi

1 product

Mod Wsgi

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Modwsgi Mod Wsgi	Up to 3.4
Modwsgi Mod Wsgi	Version 1.0
Modwsgi Mod Wsgi	Version 1.1
Modwsgi Mod Wsgi	Version 1.2
Modwsgi Mod Wsgi	Version 1.3
Modwsgi Mod Wsgi	Version 1.4
Modwsgi Mod Wsgi	Version 1.5
Modwsgi Mod Wsgi	Version 1.6
Modwsgi Mod Wsgi	Version 2.0
Modwsgi Mod Wsgi	Version 2.1
Modwsgi Mod Wsgi	Version 2.2
Modwsgi Mod Wsgi	Version 2.3
Modwsgi Mod Wsgi	Version 2.4
Modwsgi Mod Wsgi	Version 2.5
Modwsgi Mod Wsgi	Version 2.6
Modwsgi Mod Wsgi	Version 2.7
Modwsgi Mod Wsgi	Version 2.8
Modwsgi Mod Wsgi	Version 3.0
Modwsgi Mod Wsgi	Version 3.1
Modwsgi Mod Wsgi	Version 3.2
Modwsgi Mod Wsgi	Version 3.3