ALT-PU-2023-6939-1
Package apache2-mod_perl updated to version 2.0.13-alt1 for branch sisyphus_e2k.
Closed vulnerabilities
Published: 2007-03-30
BDU:2022-02598
Уязвимость компонентов PerlRun.pm и RegistryCooker.pm модуль для веб-сервера Apache mod_perl, позволяющие нарушителю вызвать отказ в обслуживании
Severity: MEDIUM (5.3)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
References:
Published: 2007-03-30
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2007-1349
PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.
Severity: MEDIUM (5.0)
References:
- 20070602-01-P
- 20070602-01-P
- RHSA-2007:0395
- RHSA-2007:0395
- RHSA-2008:0630
- RHSA-2008:0630
- 24678
- 24678
- 24839
- 24839
- 25072
- 25072
- 25110
- 25110
- 25432
- 25432
- 25655
- 25655
- 25730
- 25730
- 25894
- 25894
- 26084
- 26084
- 26231
- 26231
- 26290
- 26290
- 31490
- 31490
- 31493
- 31493
- 33720
- 33720
- 33723
- 33723
- GLSA-200705-04
- GLSA-200705-04
- 248386
- 248386
- 1021508
- 1021508
- http://support.avaya.com/elmodocs2/security/ASA-2007-293.htm
- http://support.avaya.com/elmodocs2/security/ASA-2007-293.htm
- http://svn.apache.org/repos/asf/perl/modperl/branches/1.x/Changes
- http://svn.apache.org/repos/asf/perl/modperl/branches/1.x/Changes
- http://www.gossamer-threads.com/lists/modperl/modperl/92739
- http://www.gossamer-threads.com/lists/modperl/modperl/92739
- MDKSA-2007:083
- MDKSA-2007:083
- SUSE-SR:2007:012
- SUSE-SR:2007:012
- SUSE-SR:2007:008
- SUSE-SR:2007:008
- RHSA-2007:0396
- RHSA-2007:0396
- RHSA-2007:0486
- RHSA-2007:0486
- RHSA-2008:0261
- RHSA-2008:0261
- RHSA-2008:0627
- RHSA-2008:0627
- 23192
- 23192
- 1018259
- 1018259
- 2007-0023
- 2007-0023
- USN-488-1
- USN-488-1
- ADV-2007-1150
- ADV-2007-1150
- modperl-pathinfo-dos(33312)
- modperl-pathinfo-dos(33312)
- oval:org.mitre.oval:def:10987
- oval:org.mitre.oval:def:10987
- oval:org.mitre.oval:def:8349
- oval:org.mitre.oval:def:8349
Closed bugs
apache2-mod_perl: update to 2.0.13 to support perl 5.38