Lucene search

K
freebsdFreeBSDEF2FFB03-F2B0-11DB-AD25-0010B5A0A860
HistoryMar 29, 2007 - 12:00 a.m.

mod_perl -- remote DoS in PATH_INFO parsing

2007-03-2900:00:00
vuxml.freebsd.org
17

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.006 Low

EPSS

Percentile

77.8%

Mandriva reports:

PerlRun.pm in Apache mod_perl 1.29 and earlier, and
RegistryCooker.pm in mod_perl 2.x, does not properly escape
PATH_INFO before use in a regular expression, which allows remote
attackers to cause a denial of service (resource consumption) via a
crafted URI.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmod_perl< 1.30UNKNOWN
FreeBSDanynoarchmod_perl2< 2.0.3_2,3UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.006 Low

EPSS

Percentile

77.8%