Red Hat Security AdvisoryRHSA-2007:0486
mod_perl security update
Released 2007-06-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 mod_perl-1.26-8.el2, mod_perl-1.26-8.el2.i386, mod_perl-1.26-8.el2.ia64
- Red Hat Enterprise Linux ES version 2.1 mod_perl-1.26-8.el2, mod_perl-1.26-8.el2.i386
- Red Hat Enterprise Linux WS version 2.1 mod_perl-1.26-8.el2, mod_perl-1.26-8.el2.i386
- Red Hat Linux Advanced Workstation 2.1 mod_perl-1.26-8.el2, mod_perl-1.26-8.el2.ia64
Fixes 1 record
Priority LOW 35
PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resourc…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.10425 · Published 2007-03-30 · Fixed CWE-20
