Red Hat Security AdvisoryRHSA-2018:2737
mod_perl security update
Released 2018-09-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) mod_perl-2.0.4-12.el6_10
- Red Hat Enterprise Linux Desktop Optional (v. 6) mod_perl-devel-2.0.4-12.el6_10
- Red Hat Enterprise Linux HPC Node (v. 6) mod_perl-2.0.4-12.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) mod_perl-devel-2.0.4-12.el6_10
- Red Hat Enterprise Linux Server (v. 6) mod_perl-2.0.4-12.el6_10
- Red Hat Enterprise Linux Server Optional (v. 6) mod_perl-devel-2.0.4-12.el6_10, mod_perl-devel-2.0.4-12.el6_10.ppc
- Red Hat Enterprise Linux Workstation (v. 6) mod_perl-2.0.4-12.el6_10
- Red Hat Enterprise Linux Workstation Optional (v. 6) mod_perl-devel-2.0.4-12.el6_10
Fixes 1 record
Priority MEDIUM 53
mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code fo…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08834 · Published 2018-08-26 · Partial fix CWE-94
