Red Hat Security AdvisoryRHSA-2007:0395
mod_perl security update
Released 2007-06-14 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 mod_perl-1.99_09-12.ent, mod_perl-1.99_09-12.ent.i386, mod_perl-devel-1.99_09-12.ent +1
- Red Hat Enterprise Linux (v. 5 server) mod_perl-2.0.2-6.3.el5, mod_perl-2.0.2-6.3.el5.i386, mod_perl-2.0.2-6.3.el5.ia64 +5
- Red Hat Enterprise Linux AS version 3 mod_perl-1.99_09-12.ent, mod_perl-1.99_09-12.ent.i386, mod_perl-1.99_09-12.ent.ia64 +5
- Red Hat Enterprise Linux AS version 4 mod_perl-1.99_16-4.5, mod_perl-1.99_16-4.5.i386, mod_perl-1.99_16-4.5.ia64 +5
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) mod_perl-2.0.2-6.3.el5, mod_perl-2.0.2-6.3.el5.i386, mod_perl-devel-2.0.2-6.3.el5 +1
- Red Hat Enterprise Linux Desktop version 4 mod_perl-1.99_16-4.5, mod_perl-1.99_16-4.5.i386, mod_perl-devel-1.99_16-4.5 +1
- Red Hat Enterprise Linux ES version 3 mod_perl-1.99_09-12.ent, mod_perl-1.99_09-12.ent.i386, mod_perl-1.99_09-12.ent.ia64 +3
- Red Hat Enterprise Linux ES version 4 mod_perl-1.99_16-4.5, mod_perl-1.99_16-4.5.i386, mod_perl-1.99_16-4.5.ia64 +3
- Red Hat Enterprise Linux WS version 3 mod_perl-1.99_09-12.ent, mod_perl-1.99_09-12.ent.i386, mod_perl-1.99_09-12.ent.ia64 +3
- Red Hat Enterprise Linux WS version 4 mod_perl-1.99_16-4.5, mod_perl-1.99_16-4.5.i386, mod_perl-1.99_16-4.5.ia64 +3
Fixes 1 record
Priority LOW 35
PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resourc…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.10425 · Published 2007-03-30 · Fixed CWE-20
