This host has Django installed and is prone to Directory Traversal Vulnerability.

Successful exploitation will let the attacker launch directory traversal attack and read arbitrary files via crafted URLs. Impact Level: Application

Upgrade to Django 0.96.4 or 1.0.3 later. http://www.djangoproject.com/download/

Admin media handler in core/servers/basehttp.py does not properly map URL requests to expected 'static media files,' caused via a carefully-crafted URL whcih can cause the development server to serve any file to which it has read access.

Django 0.96 before 0.96.4 and 1.0 before 1.0.3 on Linux

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=539134
• http://secunia.com/advisories/36137
• http://www.djangoproject.com/weblog/2009/jul/28/security/

---

Updated on 2015-03-25