5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.011 Low
EPSS
Percentile
82.6%
Mod_perl incorporates a Perl interpreter into the Apache web server,
so that the Apache web server can directly execute Perl code.
An issue was found in the “namespace_from_uri” method of the
ModPerl::RegistryCooker class. If a server implemented a mod_perl registry
module using this method, a remote attacker requesting a carefully crafted
URI can cause resource consumption, which could lead to a denial of service
(CVE-2007-1349).
Users of mod_perl should update to these erratum packages which contain a
backported fix to correct this issue.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | any | src | mod_perl | < 1.99_16-4.5 | mod_perl-1.99_16-4.5.src.rpm |
RedHat | any | s390x | mod_perl-devel | < 1.99_09-12.ent | mod_perl-devel-1.99_09-12.ent.s390x.rpm |
RedHat | 5 | s390x | mod_perl-devel | < 2.0.2-6.3.el5 | mod_perl-devel-2.0.2-6.3.el5.s390x.rpm |
RedHat | any | ia64 | mod_perl-devel | < 1.99_09-12.ent | mod_perl-devel-1.99_09-12.ent.ia64.rpm |
RedHat | 5 | ppc64 | mod_perl-devel | < 2.0.2-6.3.el5 | mod_perl-devel-2.0.2-6.3.el5.ppc64.rpm |
RedHat | any | i386 | mod_perl-devel | < 1.99_16-4.5 | mod_perl-devel-1.99_16-4.5.i386.rpm |
RedHat | any | ppc | mod_perl-devel | < 1.99_16-4.5 | mod_perl-devel-1.99_16-4.5.ppc.rpm |
RedHat | any | i386 | mod_perl-devel | < 1.99_09-12.ent | mod_perl-devel-1.99_09-12.ent.i386.rpm |
RedHat | any | ppc | mod_perl-devel | < 1.99_09-12.ent | mod_perl-devel-1.99_09-12.ent.ppc.rpm |
RedHat | any | i386 | mod_perl | < 1.99_09-12.ent | mod_perl-1.99_09-12.ent.i386.rpm |