Red Hat Security AdvisoryRHSA-2007:0396
mod_perl security update
Released 2007-06-20 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Application Stack v1 for Enterprise Linux AS (v.4) mod_perl-2.0.3-1.el4s1.3, mod_perl-2.0.3-1.el4s1.3.i386, mod_perl-devel-2.0.3-1.el4s1.3 +1
- Red Hat Application Stack v1 for Enterprise Linux ES (v.4) mod_perl-2.0.3-1.el4s1.3, mod_perl-2.0.3-1.el4s1.3.i386, mod_perl-devel-2.0.3-1.el4s1.3 +1
Fixes 1 record
Priority LOW 35
PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resourc…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.10425 · Published 2007-03-30 · Fixed CWE-20
