CVE-2014-0240

Name of the Vulnerable Software and Affected Versions mod wsgi versions prior to 3.5

Description The issue arises when the mod wsgi module for Apache is run in daemon mode on certain Linux kernels. It fails to properly handle error codes returned by setuid, allowing local users to gain privileges through vectors related to the number of running processes.

Recommendations For mod wsgi versions prior to 3.5, update to version 3.5 or later to resolve the issue.